quorvethhalcyrix[.]com

quorvethhalcyrix.com is a domain currently registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and is flagged as a generic phishing site. The domain does not appear to be associated with a specific brand or organization and does not utilize any known drainer kits. The site's page title is 'Kryvion Soltrex', which could be a fabricated name or a reference to a fictional entity.

Infrastructure analysis reveals that the domain has a VirusTotal score of 6/95, indicating that 6 out of 95 security vendors flag this domain as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 188.114.97.3. The domain was created on May 27, 2026, and is protected by a Let's Encrypt SSL certificate. The site is also detected on one known security blocklist, specifically PhishDestroy. Cloudflare services, including Cloudflare Browser Insights and HTTP/3, are in use, which could indicate an attempt to appear legitimate and enhance user trust.

The domain is currently active and poses an elevated risk. While the domain is not widely recognized or detected by many security vendors, the presence on a security blocklist and the specific technical indicators suggest a potential threat. It is recommended that network administrators and security teams monitor traffic to this domain and consider blocking it to prevent potential phishing attacks. Users should be educated to recognize and avoid suspicious links and to verify the legitimacy of websites before entering any sensitive information. The remaining risk is moderate to high, especially if the domain is used in targeted phishing campaigns.