naiqja[.]icu

On July 29, 2026, the domain naiqja.icu was classified as a generic phishing site with an elevated risk rating and remains active. The domain was registered on June 12, 2026 through Gname.com Pte. Ltd., indicating a very recent creation window that aligns with typical fast‑flux phishing campaigns. Intelligence indicates the domain appears on one security blocklist and is actively blocked by the PhishDestroy sinkhole, confirming that defensive infrastructure has already taken mitigation steps.

VirusTotal analysis shows that 17 of 91 scanned security vendors have flagged the domain, providing modest but notable consensus of malicious behavior. The detection count suggests the site is being recognized by a subset of scanners, which may be due to limited exposure time. Defenders should add naiqja.icu to DNS and proxy filtering rules, ensure it is listed in web reputation and URL filtering services, and monitor for any outbound connections to the domain.

Given the recent registration date and existing blocklist presence, proactive containment is advised while awaiting further contextual data such as hosting IPs or payload samples. Continuous telemetry collection from network sensors is recommended to capture any subsequent attempts to resolve or contact the domain, enabling rapid response should the campaign expand. The combination of blocklist presence, partial vendor detections, and active blocking by PhishDestroy underscores the need for immediate defensive action.