np[.]yutvqqj[.]com

Analysis as of July 19, 2026 identifies np.yutvqqj.com as an active generic phishing infrastructure. The domain was registered on June 27, 2026 through IONOS SE and resolves to the IPv4 address 198.71.59.189. The sole observable attribute on the live page is the title "Sign in – Google Accounts," indicating an attempt to impersonate a Google login portal. The domain was submitted to a multi‑engine scanning service and examined by 95 vendors; no detections were reported at the time of analysis, but the absence of detections does not constitute evidence of benign intent. The infrastructure remains under investigation, and no additional technical artifacts such as SSL certificate details, hosting ASN, or content snapshots are currently available. Defenders should consider blocking the domain at network perimeter and DNS layers, monitor for related hostnames or IP addresses, and enforce user education about unsolicited login prompts referencing Google services. Ongoing collection of page content, network traffic, and any payloads will be required to fully characterize the threat vector and to determine whether the site is being used for credential harvesting or other malicious activities.