baidusviip[.]com

This domain is currently active and resolves to the IP address 43.109.133.202, which is hosted in Hong Kong by Alibaba Cloud (Singapore) Private Limited. The domain baidusviip.com was registered on 27 May 2026 through Dominet (HK) Limited and uses the authoritative nameservers limpopo.ns.atrustdns.com and singu‑chuli.ns.atrustdns.com. A TLS certificate issued by Let’s Encrypt (R12) is present, and the web server returns HTTP 200 responses, indicating that content is being served. The site appears on a single public security blocklist and has been flagged by PhishDestroy. VirusTotal scanners reported 12 positive detections out of 91 engines, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. The combination of a newly registered domain, active hosting, positive malware detections, and inclusion on a phishing‑focused blocklist classifies the infrastructure as a high‑risk phishing operation. Defenders should block both the domain and the associated IP address at perimeter defenses, monitor DNS queries for the listed nameservers, and consider adding the host to internal threat intelligence feeds. Ongoing observation of any changes to the site’s content or certificate is recommended, as the current evidence does not disclose the specific credential‑stealing tactics employed.