sqsqsqs[.]urpose[.]com

Analysis of the domain sqsqsqs.urpose.com shows a high‑risk phishing infrastructure that remains active as of July 12, 2026. The domain was registered on February 21, 2026 through NameCheap, Inc. and is hosted on nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. DNS resolution points to IP address 31.25.11.231, which belongs to AS51202 NUXOA GmbH in Germany. No SSL certificate is presented, and HTTP requests return a 302 redirect, a pattern commonly employed to forward victims to malicious payloads. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme suspicion. VirusTotal scans have recorded 11 detections out of 95 participating security vendors, reinforcing the malicious classification. The domain appears on a single public blocklist and is actively blocked by the PhishDestroy feed. The page title returned by the server matches the domain name, providing no further contextual clues. While the exact phishing lure (e.g., credential harvesting, account takeover) has not been disclosed, the combined indicators—including recent creation, lack of encryption, low reputation, and multiple vendor detections—suggest a concerted phishing campaign. Defenders should block network traffic to both the domain and its associated IP, update intrusion detection signatures to include the observed redirect behavior, and monitor for any related indicators of compromise. Further investigation of the redirected endpoint is recommended to determine the payload and victim impact.