m[.]yjrc[.]net[.]cn

Analysis of the domain m.yjrc.net.cn confirms its classification as a high-risk credential-phishing site. The domain, registered on March 13, 2026, through WEST263 INTERNATIONAL LIMITED, remains active as of July 12, 2026. It resolves to the IP address 156.251.217.181 and is currently flagged by one security blocklist. Detection engines on VirusTotal report 10 out of 95 vendors marking this domain as malicious, indicating moderate but consistent detection across security platforms. The site presents a page titled 'Home,' a common tactic to mimic legitimate landing pages. Infrastructure analysis reveals the use of Bootstrap, jQuery, Slick, Nginx, and OpenResty, which are standard technologies but frequently leveraged in phishing campaigns due to their ease of deployment. The presence of HSTS suggests an attempt to appear secure, though this does not mitigate the underlying malicious intent. The SSL certificate issued by Let's Encrypt further aligns with phishing operations, as threat actors commonly use free certificates to evade basic security warnings. While the exact target or impersonated brand remains unconfirmed, the domain's structure and registration details suggest a focus on Chinese users. The Gridinsoft trust score of 0/100 reinforces the high-risk classification. Defenders should treat this domain as actively malicious and prioritize blocking both the domain and its resolving IP address. Network security teams are advised to monitor for connections to 156.251.217.181 and review logs for any prior interactions with m.yjrc.net.cn, particularly credential submissions or redirects from this domain. Given the domain's recent registration and persistent activity, continued monitoring for related infrastructure or similar domains registered through the same provider is recommended.