healthcareqai[.]com

The domain healthcareqai.com was registered on December 5, 2025 through Unstoppable Domains Inc. and resolves to the Cloudflare‑owned address 172.67.156.127. Infrastructure analysis shows the domain uses the Cloudflare nameservers nia.ns.cloudflare.com and quincy.ns.cloudflare.com, indicating reliance on a widely used CDN service. Threat intelligence sources have added the domain to a single security blocklist and to the PhishDestroy blocklist, confirming active mitigation by at least one anti‑phishing vendor. AlienVault OTX references the domain in four distinct pulses, suggesting it has been observed in multiple threat‑intel feeds. VirusTotal scans report that seven of ninety‑one security vendors flagged the domain, demonstrating a modest but non‑trivial detection rate. The domain is currently listed as active, and no public page content or lure details have been disclosed in available intelligence, leaving the exact phishing payload or victim‑targeting strategy uncertain. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries to 172.67.156.127, and consider adding the domain to internal blocklists. Ongoing observation of any new security‑vendor detections or changes to the domain’s DNS resolution is recommended to capture potential escalation or shifts in malicious activity.