xuanwuqidian[.]com

This domain, xuanwuqidian.com, was registered on 2026-02-21 through Key-Systems GmbH and currently resolves to the Cloudflare IP address 172.67.210.59 located in the United States (AS13335). The site serves HTTP responses with status code 200 and does not present an SSL certificate, indicating unencrypted delivery. DNS resolution is handled by ns1.emailverification.info and ns2.emailverification.info. VirusTotal analysis shows that 11 of 93 security vendors flag the domain, and the Gridinsoft trust score is 0 out of 100. The domain is listed on at least one public blocklist and has been actively blocked by PhishDestroy. The threat is classified as generic phishing and is rated high risk, with the infrastructure still active as of the report date. No additional content such as page screenshots or login forms has been publicly disclosed, so the exact phishing lure remains unknown. Defenders should block the domain at network perimeter, add the IP 172.67.210.59 to deny lists, monitor DNS queries for the associated nameservers, and continue to watch for any changes in SSL deployment or content that could indicate a shift in the campaign.