whitelist-vine[.]com

whitelist-vine.com is currently flagged as a phishing infrastructure. The domain was registered on 21 February 2026 through MAT BAO CORPORATION and immediately pointed to Cloudflare’s network (ASN 13335). Both authoritative name servers, elle.ns.cloudflare.com and roman.ns.cloudflare.com, resolve the domain to the IPv6 address 2a06:98c1:3120::3, which is geolocated to the United States under Cloudflare, Inc. The site presented the page title “Suspected phishing site | Cloudflare” before being taken offline, and the TLS certificate presented was issued by Google Trust Services under the WE1 root. Automated scanning on VirusTotal recorded four positive detections out of ninety‑three submitted security vendors, and the domain appears on one external blocklist.

Independent threat‑intelligence feeds such as PhishDestroy have also listed the domain as blocked. The Gridinsoft trust score is 0 out of 100, indicating a lack of reputation. All observed indicators point to a deliberately crafted phishing landing page that leveraged Cloudflare’s CDN to hide the origin infrastructure. Because the domain is already offline, direct exploitation is no longer possible, but the hosting configuration demonstrates a reusable pattern that could be re‑used with a new domain.

Defenders should add the IPv6 address, the two Cloudflare name servers, and the domain itself to deny‑list rules in firewalls and DNS filtering solutions. Continuous monitoring of Cloudflare‑hosted IP ranges for similar short‑lived domains is advised, and any future resolution of the same name servers to new domains should be inspected promptly. The combination of low trust score, multiple vendor detections, and blocklist presence justifies a high‑confidence classification as a phishing resource.