qvxzaetnb[.]vip

Analysis of the domain qvxzaetnb.vip indicates that it remains active as of the report date, July 22 2026. DNS resolution points exclusively to the IPv4 address 199.212.57.95, and the authoritative nameservers listed are a.share-dns.com and b.share-dns.net. The domain is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that remediation mechanisms are already in place for downstream users.

VirusTotal scans show that eight of the ninety‑five participating antivirus and URL‑reputation engines have issued a malicious classification for the domain, which aligns with the observed phishing designation. No additional public intelligence such as Safe Browsing alerts, Open Threat Exchange (OTX) indicators, registrar metadata, SSL certificate details, HTTP response codes, trust‑score metrics, or page‑title information is available in the supplied data set. Consequently, the confidence in the phishing attribution rests on the combined evidence of active hosting, blocklist inclusion, and multi‑vendor detection.

Defenders should enforce DNS‑level blocking of qvxzaetnb.vip, monitor outbound traffic for connections to 199.212.57.95, and incorporate the domain into URL‑filtering policies. Network intrusion detection signatures that flag HTTP requests to this host should be deployed, and endpoint protection solutions should be updated to reflect the eight vendor detections. Ongoing observation is advised to capture any changes in hosting infrastructure or additional threat‑intel feeds that may broaden the attribution.