yinglitai[.]net

Analysis of yinglitai.net shows a newly registered domain (created 2026-02-21) that is actively hosting a WordPress site backed by MySQL, PHP, LiteSpeed, and client‑side libraries such as jQuery and Lucky Orange. The site presents the page title "Aerea Technology home - Aerea Technology" and is served over HTTPS with a Let’s Encrypt R13 certificate. DNS resolves to 151.106.116.90, an address hosted in Singapore under AS47583 (Hostinger International Limited) and delegated to ns303.jpisp.com and ns304.jpisp.com. The domain received a Gridinsoft trust score of 0/100 and four of ninety‑three VirusTotal scanners flagged it as malicious. It appears on one public blocklist and is already blocked by PhishDestroy, confirming active mitigation by at least one anti‑phishing service. The listed scam type is brand impersonation, but the specific victim brand is not disclosed in the available metadata; the page title does not reveal a target, and no further content analysis is provided. Defenders should treat the domain as high‑risk: add the domain and its IP to URL filtering and firewall deny lists, monitor for DNS queries to the associated nameservers, and consider extending blocks to the hosting ASN. Continuous re‑scanning is advised to capture any evolution of payloads or additional indicators that may emerge.