camvibe[.]xyz

PhishDestroy identifies camvibe.xyz as a generic phishing threat operating at high risk. While the specific brand being impersonated remains unclear, the domain's structure and behavior are consistent with credential harvesting campaigns targeting unsuspecting users. No specific drainer kit has been attributed, but the domain's active registration and SSL certificate via Let's Encrypt suggest ongoing malicious operations.

Technical indicators paint a concerning picture. VirusTotal shows a 3/95 detection ratio among security vendors, indicating partial but not universal flagging. The domain was registered through FewMoreTaps OÜ on April 28, 2026, and resolves to IP address 104.21.76.162. It appears on one security blocklist and is referenced in one AlienVault OTX threat intelligence pulse. Google Safe Browsing (GSB) status was not provided but should be assumed neutral until verified. The SSL certificate (E8) from Let's Encrypt adds a false veneer of legitimacy.

Camvibe.xyz remains active as of this report, underscoring the persistent risk. Users are strongly advised to avoid any interaction with this domain and to report suspicious emails or messages directing to it. Security teams should add the domain and its IP to blocklists and monitor for related infrastructure. Despite partial vendor coverage, the combination of a recent creation date, cloudflare IP, and active status warrants heightened vigilance and immediate action to mitigate potential compromise.