sgp-wps[.]com[.]cn

PhishDestroy identifies sgp-wps.com.cn as a high-risk domain actively impersonating WeChat marketing tools and short-link generators. The site leverages deceptive Chinese-language content to trick users into downloading counterfeit QR code, red envelope, or fast-hand card generators under the guise of legitimate marketing utilities. Security vendors have already flagged this domain, but it remains online and operational, posing an immediate threat to users seeking unauthorized or pirated tools.

This domain was flagged by 8 of 95 VirusTotal security vendors, indicating a strong consensus on its malicious nature. The domain was registered on February 05, 2025, through Web Commerce Communications Limited, and is currently resolving to IP address 23.141.84.53. It utilizes a Let’s Encrypt SSL certificate to appear trustworthy, further increasing the risk of users lowering their guard. The combination of recent registration, low detection rates at inception, and active hosting suggests this is a relatively new but rapidly evolving threat.

If you’ve visited sgp-wps.com.cn, avoid entering any credentials or downloading files. Disconnect from the network if possible, run a full antivirus scan, and check for unauthorized access to your accounts. Report the domain to your security team and block it at the firewall level to prevent further exposure. Always verify the legitimacy of software tools through official channels before use.