chinaqicheng[.]com

The domain chinaqicheng.com is currently classified as a high‑risk generic phishing infrastructure and remains active. It resolves to IP address 154.194.170.66, which is registered to AS139880 OWGELS INTERNATIONAL CO., LIMITED and geolocated in Hong Kong. Registration details show the domain was created on 27 August 2010 via Dynadot LLC, using the authoritative nameservers ns1.dyna-ns.net and ns2.dyna-ns.net. The web server presents an Nginx stack with jQuery, HSTS, Prism and HTTP/3 enabled, and serves a TLS certificate from Let’s Encrypt (R13). The only visible page title is “404 Not Found” while the HTTP response code is 200, indicating a potential content‑delivery mismatch. Threat intelligence sources corroborate malicious activity: AlienVault OTX lists the domain in 16 separate pulses, Scamadviser assigns a trust score of 1 / 100, Gridinsoft rates it 0 / 100, and the domain appears on two public blocklists. It is also blocked by PhishDestroy and PhishingDB, and VirusTotal reports 16 of 95 security vendors flagging the host. Defenders should treat any traffic to this domain as hostile. Immediate actions include adding the domain and its resolving IP to network deny lists, updating intrusion‑prevention signatures, and monitoring for related command‑and‑control patterns. Continuous observation is advised, as the exact payload and phishing landing pages have not been publicly disclosed.