hqehall[.]hqehall[.]fzgh[.]sonicmenusprices[.]com

hqehall.hqehall.fzgh.sonicmenusprices.com was registered on May 15, 2026 through Name SRS AB. The domain is delegated to Cloudflare name servers jasper.ns.cloudflare.com and simone.ns.cloudflare.com and resolves to the IPv4 address 104.206.0.154. VirusTotal scans have returned 12 positive detections out of 91 submitted security vendors, indicating a high likelihood of malicious intent.

The domain is listed on a single public blocklist and has been explicitly blocked by the PhishDestroy service, confirming its classification as a generic phishing infrastructure. The threat intelligence feed assigns a high risk rating and notes that the campaign remains active as of the report date, August 02, 2026. No additional data such as SSL certificates, HTTP response codes, or page titles are available at this time, leaving the exact content of the hosted site unverified.

Analysts should treat any traffic to the domain as hostile, enforce network‑level deny rules, and incorporate the IP address 104.206.0.154 into intrusion‑prevention policies. Continuous monitoring of the associated Cloudflare name servers is recommended, as they may be leveraged to serve additional malicious subdomains. Further investigation, including sandboxed browsing and capture of HTTP responses, is required to determine the specific phishing payload and any credential‑harvesting mechanisms employed.