yjrc[.]net[.]cn

The domain yjrc.net.cn has been identified as a high-risk phishing operation. Analysis indicates that the domain is currently active and appears on two security blocklists, which suggests a potential ongoing threat. The domain was registered through WEST263 INTERNATIONAL LIMITED on March 13, 2026, and is currently resolving to the IP address 156.251.217.181. The SSL certificate for the domain is issued by Let's Encrypt, which is a common practice among phishing sites to gain user trust. The domain has been flagged by 7 out of 95 security vendors on VirusTotal, and its Gridinsoft trust score is 0 out of 100, indicating a strong likelihood of malicious intent. Additionally, the domain is mentioned in 23 threat intelligence pulses on AlienVault OTX, further reinforcing its association with phishing activities. The technologies detected on the site include Bootstrap, Nginx, OpenResty, Slick, jQuery, and HSTS, which are often used to create visually appealing and functional phishing pages. Defenders should be cautious and consider blocking this domain to prevent potential phishing attacks. It is recommended to monitor network traffic for any connections to this IP address and to educate users about the risks of visiting untrusted websites. Regular updates to security blocklists and threat intelligence feeds should also be performed to stay ahead of emerging threats.