vresortsliving[.]com

Analysis as of July 28 2026 indicates that the domain vresortsliving.com is currently active and resolves to the IP address 172.67.221.104. The domain was registered on May 07 2026 through GoDaddy.com, LLC and is served by Cloudflare nameservers ollie.ns.cloudflare.com and oswald.ns.cloudflare.com. VirusTotal has recorded a single positive detection out of 91 scanned security vendors, confirming that at least one vendor identified malicious behavior associated with the domain. The indicator is also listed on one public security blocklist and has been explicitly blocked by the PhishDestroy platform, reinforcing the assessment of a high‑risk phishing infrastructure.

The available intelligence does not contain a page title, SSL certificate details, HTTP response codes, Google Safe Browsing status, Open Threat Exchange references, or additional threat‑intel evidence links, so the precise content and lure employed by the site remain unknown. Consequently, the exact phishing vector (e.g., credential harvesting for a particular brand) cannot be confirmed at this time.

Defenders should add vresortsliving.com and its resolved IP 172.67.221.104 to network‑level deny lists, enforce DNS filtering to block resolution, and monitor outbound traffic for connections to the Cloudflare nameservers. Continuous re‑scanning with multi‑engine services such as VirusTotal is recommended to capture any change in detection status. Organizations should also consider sharing observations with industry‑wide blocklists to broaden coverage. The domain’s recent creation date and active status suggest an ongoing campaign, and its presence on existing blocklists warrants immediate preventive action.