sqlsigma[.]com

The domain sqlsigma.com was registered through Dynadot Inc and currently resolves to the authoritative name servers ns1.dyna-ns.net and ns2.dyna-ns.net. Network probing shows the web server returns HTTP 200 for the default request, indicating an active web presence. The domain has been listed on a single security blocklist and is actively blocked by the PhishDestroy service, which suggests that at least one reputable anti‑phishing feed has identified it as malicious. VirusTotal records indicate the domain has been scanned by 91 vendor engines; none have raised a detection at the time of analysis, but the absence of a detection does not imply benign intent.

No public SSL certificate details, page title, or content snapshots are available in the current intelligence set, leaving the exact phishing payload or targeted brand undefined. Likewise, Safe Browsing, Open Threat Exchange (OTX), and other reputation services have not been referenced, so their assessments remain unknown. Given the combination of an active HTTP endpoint, blocklist presence, and active blocking by PhishDestroy, defenders should treat sqlsigma.com as a high‑confidence phishing indicator.

Recommended mitigation steps include adding the domain to outbound deny lists, updating intrusion detection signatures to flag any DNS or HTTP traffic to the domain, and monitoring the associated name servers for any changes that could signal new campaign infrastructure. Continuous re‑scanning on multi‑vendor platforms is advised to capture any future detections. Until additional content analysis or SSL telemetry becomes available, the domain should remain under active observation and be prevented from reaching end‑users.