link[.]qfsdigitalnetworkx[.]com

The domain www.link.qfsdigitalnetworkx.com is currently active and classified as a high‑risk generic phishing site. Registration data shows the domain was created on 23 October 2025 and was registered through TuringSign Inc. d/b/a Cosmotown. Authoritative nameservers ns5.maskhosting.com and ns6.maskhosting.com resolve the domain to the IPv4 address 5.182.208.207.

The host IP is listed on a single security blocklist and the domain is blocked by PhishDestroy, indicating that at least one reputable anti‑phishing feed has identified it as malicious. VirusTotal analysis reports five detections out of ninety‑one scanned vendors, confirming that multiple security products have flagged the domain as suspicious. No additional telemetry such as SSL certificate details, HTTP response codes, Safe Browsing status, or page title information has been published, so the exact content and any impersonated brand remain unverified.

Defenders should immediately add www.link.qfsdigitalnetworkx.com to perimeter blocklists and DNS filtering policies, and consider blocking the associated IP address 5.182.208.207 to reduce exposure. Continuous monitoring of the host’s ASN and any future detection updates from threat‑intelligence feeds is advised, as the domain may evolve or spawn additional infrastructure. Organizations should also review email gateway logs for attempts to reference this domain and enforce user awareness training that emphasizes the risk of unknown links, especially those that appear in phishing‑related communications.