vivoqianbaoappxiazaigw[.]com[.]cn

Analysis of the domain vivoqianbaoappxiazaigw.com.cn indicates it is currently active and serving HTTP content (status 200). The page title observed, 'VIVO钱包APP下载 - 全球主流的数字钱包管理并台', suggests an attempt to masquerade as a VIVO application download page, consistent with a generic phishing campaign. The domain was registered on 24 May 2026 and resolves to IP 154.194.143.133, an address located in Hong Kong and associated with Starbow Ltd. The TLS certificate is issued by Let’s Encrypt (E8), providing encrypted transport but no indication of legitimacy. Reputation services flag the domain: 20 of 91 VirusTotal scanners raise detections, Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on at least one public blocklist. It is also listed in an AlienVault OTX pulse and has been blocked by PhishDestroy. These indicators collectively point to a high‑risk phishing infrastructure. Uncertainties remain regarding the specific payload or credential harvesting mechanisms, as no detailed content analysis is available. Defenders should block the domain at the network perimeter, add the IP address to deny lists, and monitor for any outbound connections to the host. Endpoint detection rules should be tuned to alert on attempts to resolve or contact this domain, and any credential submissions to VIVO‑related services should be investigated for potential compromise.