yubit-qpkz[.]com

Analysis of yubit-qpkz.com indicates a high‑risk phishing infrastructure that is currently active. The domain was registered on June 08, 2026 through Gname.com Pte. Ltd., a registrar frequently observed in malicious campaigns. DNS resolution points to the IP address 172.67.201.58, an address associated with Cloudflare’s edge network, suggesting the use of a CDN or reverse‑proxy service to obscure the true origin server.

VirusTotal records show that 14 of 91 security vendors have flagged the domain, providing a multi‑engine consensus that the site exhibits malicious characteristics. Independent blocklist providers PhishDestroy, MetaMask, and SEAL have added the domain to their deny lists, and it appears on three additional security blocklists, reinforcing the view that the domain is recognized as hostile by multiple threat‑intelligence feeds. The risk level is classified as high and the operational status is marked as active, meaning the site is expected to be reachable and potentially serving malicious payloads or credential‑harvesting pages.

No public page title, SSL certificate details, or HTTP response codes have been disclosed, leaving the exact content of the landing page unverified at this time. Consequently, defenders should treat any traffic to yubit-qpkz.com as hostile, enforce network‑level blocking, and incorporate the domain into endpoint and email security policies. Continuous monitoring of the associated IP address and the registrar’s future registrations is recommended to detect any pivoting or re‑use of the same infrastructure.