1188xinpujing[.]com

The domain 1188xinpujing.com has been identified as a generic phishing threat. While the specific brand it impersonates is not known, it is suspected to be a fake login page designed to capture user credentials. The domain does not appear to be using a specific drainer kit but is part of a broader phishing campaign.

Infrastructure analysis reveals that 1188xinpujing.com has been flagged by 20 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through NameSilo, LLC and resolves to the IP address 19.200.8.105. It was created on June 19, 2026, and currently appears on one security blocklist. The domain is associated with a Let's Encrypt SSL certificate, which is often used by phishing actors to lend an air of legitimacy to their sites.

The domain is currently offline, having been taken down as part of a response action. Despite its offline status, the risk remains elevated due to the potential for the domain to be reactivated or redirected to other malicious infrastructure. Organizations are advised to continue monitoring for any reappearance of the domain and to educate users on the signs of phishing attacks, such as unexpected login requests and suspicious URLs.