qqj[.]xkn[.]mybluehost[.]me

Analysis indicates that qqj.xkn.mybluehost.me is currently active and classified as a generic phishing site with a high risk rating. The domain resolves to IP 50.6.3.94, located in the United States and announced by AS31898, which is owned by Oracle Corporation. HTTP requests receive a 302 redirect, and the presented page title is “Welcome — Coming Soon”. The SSL certificate is issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36, confirming that TLS is in use. Registration data shows the domain was created on 5 October 2016 through Domain.com – Network Solutions, LLC, and it uses the default MyBluehost nameservers ns1.mybluehost.me and ns2.mybluehost.me. Reputation metrics are poor: Gridinsoft assigns a trust score of 0 / 100, the domain appears on two public blocklists, and it is listed by PhishDestroy and PhishingDB. VirusTotal scans have flagged the domain by 13 of 95 security vendors. No additional content analysis is available beyond the generic “Coming Soon” title, so the exact phishing payload or targeted brands remain unknown. Defenders should treat the domain as malicious, block outbound connections to the IP address, add the fully qualified domain to DNS‑based blacklists, and monitor for any credential‑submission traffic that may be directed to this host. Ongoing observation of the hosting provider and rapid revocation of any credentials associated with this domain are recommended.