sqlbatimcorporation[.]vu

This domain, sqlbatimcorporation.vu, was registered on 14 June 2026 and currently resolves to the IP address 172.67.191.223. VirusTotal analysis shows that 11 of 91 security vendors have flagged the domain, indicating a measurable level of malicious confidence. The domain is listed on a single external security blocklist and has been actively blocked by the PhishDestroy mitigation service. The threat is classified as generic phishing with an elevated risk rating and remains active as of the report date, 29 July 2026.

The available evidence confirms that the infrastructure is hosted on a cloud provider associated with the 172.67.0.0/16 range, a network commonly leveraged for fast‑flux and abuse. No additional metadata such as SSL certificate details, HTTP response codes, or page title information is presently available, leaving the exact content and lure technique unverified. Consequently, defenders should treat sqlbatimcorporation.vu as a high‑confidence malicious indicator.

Recommended actions include adding the domain to deny lists, enforcing DNS sink‑hole redirects, and monitoring outbound connections to the associated IP. Continuous re‑evaluation is advised, as further analysis of the web payload may reveal specific credential‑harvesting forms or targeted brands. Organizations should also review any recent user reports for attempted interactions with this domain and educate users about the risk of unsolicited login prompts that may be delivered via email or messaging channels.