v3-chinesa[.]fun

PhishDestroy has flagged the domain v3-chinesa.fun under active investigation for generic phishing with a medium risk rating as of seed 14c21d. The threat involves a fraudulent portal impersonating legitimate Chinese language learning services, designed to harvest user credentials and payment details under the guise of educational materials. This campaign preys on language learners seeking online courses or study resources, redirecting victims to malicious payment pages after falsely claiming ‘limited-time enrollment discounts’.

This domain was registered on April 27, 2026 through HOSTINGER operations, UAB, resolving to IP 168.231.97.114 with a valid Let’s Encrypt SSL certificate. As of the latest scan, v3-chinesa.fun shows 1 out of 95 VirusTotal detections and remains unlisted on major threat intelligence blocklists. The domain’s recent creation and lack of historical flagging suggest a rapidly deployed campaign leveraging low detection rates due to its novelty.

Users are advised to avoid accessing v3-chinesa.fun or any affiliated subdomains. Enterprises should block the domain and IP 168.231.97.114 at the firewall level. If engagement has occurred, scan systems for credential theft or malware using updated antivirus tools. Report any fraudulent activity to local cybercrime units and the platform being impersonated. Educational institutions and language learning platforms are urged to issue warnings to students and staff to prevent further exploitation.