df[.]qigame[.]sa[.]com

Analysis of df.qigame.sa.com indicates a high‑risk generic phishing infrastructure that is currently offline. The domain resolves to the IP address 178.16.53.103, which belongs to AS202412 Omegatech LTD and is geolocated in the Netherlands. Registration data shows the domain was created on June 25, 1998 through the registrar Sav.com, LLC, and it is served by four CentralNic nameservers (ns1.centralnic.net through ns4.centralnic.net).

The site presents the page title "Site is created successfully!" but offers no SSL certificate, resulting in an unencrypted HTTP service. Threat intelligence flags include a Google Safe Browsing classification for social engineering and a block entry from PhishDestroy. The domain appears on a single security blocklist, and Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme suspicion.

VirusTotal analysis reports that 16 of 93 security vendors have flagged the domain, reinforcing the malicious assessment. Given the combination of a non‑TLS endpoint, low trust score, multiple vendor detections, and confirmation from both Google Safe Browsing and PhishDestroy, defenders should continue to block any network traffic to 178.16.53.103 and add df.qigame.sa.com to internal deny lists. Continuous monitoring of the IP and associated ASN is advised to detect any re‑activation, and security tools should be configured to treat the domain as malicious in future URL filtering and email scanning operations.