via9x[.]com

On 22 July 2026 the domain via9x.com was created on 17 July 2026 and is currently listed as active. The registrar record shows the domain was registered through Fewmoretaps OU d/b/a Trustname.com. DNS resolution points to the single IPv4 address 2.57.91.88, which is served by the authoritative nameservers lunar.dns-parking.com and solar.dns-parking.com. The domain appears on one security blocklist and is explicitly blocked by the PhishDestroy vendor, confirming that at least one external mitigation service has observed phishing-related activity linked to this host.

No additional public threat-intel sources such as OTX or Safe Browsing entries are cited, and no SSL certificate details, HTTP status codes, or page-title information have been released, leaving the precise content of the site unverified. Analysis indicates that the short lifespan of the domain, the use of a parking-service nameserver pair, and the immediate blocklisting are consistent with a rapid-deployment phishing campaign. The IP address 2.57.91.88 has not been cross-referenced with other known malicious infrastructure in the supplied data, so its broader reputation cannot be asserted at this time.

Defenders should add the domain and its resolving IP to network-level deny lists, enforce DNS filtering that incorporates the blocklist entry, and monitor for any future resolution changes or additional detections from other vendors. Continuous observation of the registrar Fewmoretaps OU and any subsequent DNS updates is recommended, as changes could signal a shift in hosting or an expansion of the malicious campaign. Until further forensic snapshots of the web content become available, the primary mitigation focus remains on blocking the domain and its associated IP.