vertex-lab[.]com

Analysis of the domain vertex-lab.com, registered on February 21, 2026, through GoDaddy.com, LLC, indicates it was actively used for phishing operations targeting users associated with the platform identified by the page title 'VUBE.' The domain resolved to IP address 172.67.128.111, hosted on Cloudflare's infrastructure (AS13335), a common choice for both legitimate services and malicious actors due to its proxy capabilities. The SSL certificate, issued by Google Trust Services (WE1), provided encrypted connections, though encryption alone does not validate legitimacy. As of July 24, 2026, the domain is offline, but prior activity was flagged by at least three security blocklists, including PhishDestroy, MetaMask, and SEAL, suggesting detection by automated and community-driven threat intelligence systems. Detection by one of 93 security vendors on VirusTotal further supports the classification of this domain as malicious, though the low detection rate may reflect either early-stage detection or evasion techniques.

The Gridinsoft trust score of 0/100 reinforces the domain's high-risk status. Infrastructure analysis reveals the use of Cloudflare nameservers (hank.ns.cloudflare.com and joan.ns.cloudflare.com) and technologies such as Cloudflare Browser Insights and HTTP/3, which are consistent with modern phishing campaigns leveraging content delivery networks to obscure origin servers. The exact nature of the phishing content remains unconfirmed, as the domain's page title ('VUBE') does not provide sufficient detail to determine whether the site targeted credentials, financial data, or other sensitive information.

No evidence links this domain to a specific phishing kit or brand impersonation beyond the page title. Defenders should treat vertex-lab.com as compromised infrastructure and maintain its blocklist status even though it is currently offline.