www3-vpass[.]qdlxgl[.]com

This domain resolves to IP address 104.21.92.15 and was registered on November 16, 2019 through Gname.com Pte. Ltd. The domain remains active as of July 12, 2026 and carries a high risk designation with a generic_phishing threat classification. Infrastructure analysis reveals the page title qdlxgl.com | 502: Bad gateway. Google Safe Browsing lists a SOCIAL_ENGINEERING flag for the domain. VirusTotal reports show detection by 13 out of 95 security vendors while the domain appears on 1 security blocklist. Gridinsoft assigns a trust score of 0/100 and PhishDestroy maintains an active block entry against it.

The Airdrop Scam phishing kit is associated with this domain according to known intelligence. The domain was created years prior to the current report date yet continues to resolve and trigger blocks. Technical indicators include the exact VirusTotal ratio, the single blocklist presence, and the explicit Google Safe Browsing classification. No brand target is named in the provided data so the domain is treated as a generic phishing instance tied to the recorded kit.

Exact page content remains unanalyzed beyond the recorded title string. It is uncertain whether the 502 response reflects an intentional configuration or a transient server state at the time of observation. Registration details and the listed IP are confirmed but do not reveal additional hosting or ASN information in the available records.

Defenders should block the domain and the resolving IP 104.21.92.15 at network and endpoint controls. Existing blocklist entries and the recorded detections provide actionable feeds for updating internal filters. Ongoing monitoring of the IP and any related subdomains is warranted given the active status. The combination of the Airdrop Scam kit reference and the SOCIAL_ENGINEERING flag supports immediate restriction without reliance on live page inspection.