weixinh[.]com

On July 31, 2026, the domain www.weixinh.com was identified as a high‑risk generic phishing site. The domain resolves to the IP address 188.114.97.3 and is hosted on Cloudflare infrastructure, as indicated by the authoritative nameservers chin.ns.cloudflare.com and james.ns.cloudflare.com. Registration data shows the domain was created on June 05, 2025 and is registered through NameSilo, LLC, a registrar commonly used for both legitimate and malicious domains.

Threat intelligence platforms have recorded the domain on a single security blocklist, and the anti‑phishing service PhishDestroy has actively blocked the domain, although the block remains listed as “still active,” suggesting the malicious site is still reachable. VirusTotal analysis reports that one out of ninety‑one scanned security vendors flagged the domain, providing a minimal but notable detection signal. The limited detection count and solitary blocklist entry indicate that the domain may be newly operational or that broader detection coverage has not yet been applied.

Uncertainties remain regarding the specific brand or service being spoofed, as no page title, brand identifier, or kit information is available in the current intelligence set. Consequently, defenders should treat www.weixinh.com as a malicious indicator, enforce strict outbound filtering for traffic to the associated IP address, and add the domain to internal blocklists. Continuous monitoring of VirusTotal, additional sandbox analyses, and correlation with network logs are recommended to capture any evolution in the threat posture or emergence of new detection signatures.