festify[.]club

This domain, festify.club, is under active investigation as a high-risk phishing redirector. Registered through Porkbun and currently resolving to Vercel nameservers (ns1.vercel-dns.com, ns2.vercel-dns.com), the domain returns an HTTP 307 Temporary Redirect status, suggesting it is being used to forward victims to malicious endpoints rather than hosting content directly. As of July 27, 2026, ten of ninety-one security vendors on VirusTotal flag the domain, though the specific payload or final destination remains unconfirmed.

The domain appears on at least one security blocklist and is actively blocked by PhishDestroy, indicating prior detection by commercial threat feeds. Infrastructure analysis reveals no associated autonomous system or hosting provider details beyond the Vercel nameserver delegation, which is consistent with ephemeral phishing campaigns leveraging cloud-based DNS. The domain’s registration and DNS configuration do not present anomalies beyond its use in redirect operations.

Defenders should treat this domain as a confirmed malicious redirector and prioritize blocking at DNS and network layers. Further analysis of the final redirect target is recommended to determine the exact phishing kit or brand impersonation in use, though no brand or scam type has been identified from available data. The domain remains active and should be monitored for changes in behavior or additional detection by security vendors.