haocheng[.]tw

This domain, haocheng.tw, is identified as a phishing site designed to harvest user credentials through deceptive login interfaces. Analysis indicates the site mimics legitimate services to trick visitors into submitting sensitive information such as usernames, passwords, or financial details. The content displayed under the title 浩宬廣告 suggests a localized campaign targeting Chinese-speaking users, potentially leveraging social engineering tactics to appear trustworthy. Infrastructure analysis reveals multiple technical indicators confirming its malicious nature. The domain was registered on February 21, 2026, through Yuan-Jhen Info., a registrar frequently associated with high-risk domains. Security vendors on VirusTotal flagged haocheng.tw with 18 detections out of 95 engines, indicating broad recognition of its phishing activity. The site resolves to the IP address 103.17.8.39, hosted under AS131149 (Yuan-Jhen Info., Co., Ltd), and its SSL certificate, issued by Let's Encrypt, does not mitigate the underlying threat. Additionally, the domain appears on at least one security blocklist, further corroborating its classification as a phishing endpoint. Users who visited haocheng.tw should take immediate action to mitigate potential risks. If any credentials or personal information were entered, affected accounts should be secured by changing passwords and enabling multi-factor authentication where available. Monitor financial statements and credit reports for unauthorized activity, as stolen credentials may be exploited across other platforms. Devices used to access the site should undergo a thorough security scan to detect and remove any residual malware or tracking mechanisms. Given the domain's current offline status, users should remain vigilant for similar phishing attempts, particularly those impersonating local services or advertisements.