jdpayqianbaoguanwang[.]com[.]cn

This domain, jdpayqianbaoguanwang.com.cn, is identified as a high-risk phishing site specifically designed to impersonate JDPAY, a digital wallet and payment platform. Analysis indicates the site mimics the official JDPAY login portal, likely targeting users to harvest credentials or facilitate unauthorized transactions. The domain remains active as of the latest verification, posing a direct threat to individuals seeking legitimate JDPAY services. Infrastructure analysis reveals the domain was registered on May 24, 2026, through Web Commerce Communications Limited, a registrar commonly associated with abusive registrations. It resolves to the IP address 154.194.141.204 and is flagged by 16 of 95 security vendors on VirusTotal, indicating widespread detection. The site appears on one security blocklist and employs a Let's Encrypt SSL certificate (serial number E8), which, while providing encryption, does not validate legitimacy. The page title, 'JDPAY钱包官网 - 安全支付工具｜智能数字钱包平台,' closely mirrors the branding of the authentic JDPAY platform, enhancing its deceptive appearance. Current status confirms the domain is still active and operational, continuing to host the fraudulent JDPAY impersonation. Users are strongly advised to avoid interacting with this domain and to verify the authenticity of any JDPAY-related websites by accessing them directly through official channels. Organizations should update blocklists to include this domain and its associated IP address, while monitoring for similar impersonation attempts. Individuals who may have entered credentials on this site should immediately change their passwords and enable multi-factor authentication on their accounts.