nvidia-www[.]com[.]cn

The domain nvidia-www.com.cn was registered on June 28, 2026 through 北京新网数码信息技术有限公司 and currently resolves to the IPv4 address 103.120.83.2. The domain is served by four nameservers (ns1.363.hk, ns2.363.hk, ns1.myhostadmin.net, ns2.myhostadmin.net), indicating a distributed DNS configuration that may be used to increase resilience against takedown attempts. Analysis of public threat‑intelligence sources shows that Google Safe Browsing has flagged the domain for social engineering, and four of ninety‑one VirusTotal scanners have identified malicious activity associated with the host.

The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy mitigation service. No additional public evidence such as page titles, SSL certificate details, or HTTP response codes is currently available, leaving the exact content and lure technique of the site unverified. The combination of a recent registration date, a dedicated IP address, and multiple detections across independent platforms suggests a high‑confidence malicious operation, even though the precise phishing campaign (e.g., credential harvesting, malware delivery) cannot be confirmed without content analysis.

Defenders should add the domain and its IP address to outbound filtering rules, update intrusion‑prevention signatures to include the observed VirusTotal detections, and monitor DNS queries for the listed nameservers. Network traffic to 103.120.83.2 should be logged and, where feasible, blocked at the perimeter. Incident response teams should treat any user‑initiated connections to the domain as potentially compromised and advise users to avoid interacting with any links or emails that reference nvidia-www.com.cn until further forensic analysis can be performed.