guv[.]uxq[.]mybluehost[.]me

The domain guv.uxq.mybluehost.me is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service. It resolves to the IPv4 address 69.6.192.99, which is hosted on the MyBluehost infrastructure; the authoritative name servers for the zone are ns1.mybluehost.me and ns2.mybluehost.me. Registration data shows the domain was created on 5 October 2016 through the registrar Domain.com, indicating a relatively long‑standing registration that may be used intermittently for malicious campaigns. VirusTotal analysis reports that six of ninety‑one scanning engines identify the domain as malicious, reinforcing the blocklist findings.

No additional intelligence such as Safe Browsing status, SSL certificate details, HTTP response codes, or page title is available, leaving the exact content and attack vector unverified. The lack of recent public detections suggests the infrastructure may be operating under the radar, but the existing detections and blocklist presence warrant an elevated risk assessment. Defensive teams should add the domain and its resolved IP address to outbound filtering rules, ensure that internal DNS resolvers block queries to the name servers, and monitor network traffic for connections to 69.6.192.99.

Continuous re‑scanning with multi‑vendor services is recommended to capture any changes in the hosting or payload. Organizations using email filtering should treat any messages containing links to this host as malicious and quarantine them. Because the domain is hosted on a shared hosting provider, other tenants could be affected, so broader network‑wide threat‑intel sharing is advised.