v1-d[.]app

This domain, v1-d.app, is currently under investigation for generic phishing activity targeting users seeking video editing software. The page title, "v1d — the video editor that keeps up," mimics legitimate software branding, potentially deceiving users into downloading malicious payloads or submitting credentials. No specific drainer kit or known phishing framework has been attributed to this domain at this time, but the infrastructure aligns with common phishing distribution patterns. Infrastructure analysis reveals the domain was registered on July 03, 2026, through OwnRegistrar Inc. It resolves to the IP address 172.67.207.208, which is hosted behind Cloudflare, a common tactic to obscure origin servers and evade detection. The domain currently shows 0 detections out of 95 engines on VirusTotal, indicating it has not yet been widely flagged. No entries exist in Google Safe Browsing or other major blocklists as of this report. The SSL certificate is issued by Google Trust Services, and the site employs HSTS and HTTP/3, further mimicking legitimate services to avoid suspicion. The domain remains active, and no takedown or mitigation actions have been observed. Users are advised to exercise caution, particularly when prompted to download software or enter credentials. Given the lack of detections and the use of Cloudflare, the domain may evade automated scans, increasing the risk of undetected compromise. Further monitoring and manual analysis are recommended to determine the full scope of the threat. Organizations should consider blocking the domain and IP at the network level until additional intelligence is available.