vqrlwsmzu[.]webyek[.]com

Analysis of the domain vqrlwsmzu.webyek.com, registered under the webyek.com subdomain, indicates active phishing infrastructure as of August 2, 2026. The domain is flagged by 16 of 91 security vendors on VirusTotal, a detection rate that exceeds typical benign thresholds. It appears on at least one security blocklist, further supporting its classification as malicious. PhishDestroy has blocked access to this domain, though the specific brand or service being impersonated remains unconfirmed due to limited page-content analysis.

Infrastructure analysis reveals the domain is hosted on shared web infrastructure, a common tactic among phishing operators to reduce costs and evade IP-based blocking. The SSL certificate, while present, is issued by a public certificate authority and does not provide meaningful trust signals, as phishing domains routinely use valid certificates to appear legitimate. No registrar details or autonomous system number (ASN) are currently available in public threat feeds.

Defenders should treat this domain as an elevated-risk phishing resource and implement blocking at DNS, HTTP, and endpoint levels. Network security teams are advised to monitor for connections to vqrlwsmzu.webyek.com and investigate any internal hosts attempting to access it, as this may indicate compromised credentials or ongoing phishing exposure. Additional context, such as the specific phishing kit or targeted brand, is not yet available and would require further analysis of the live page or captured payloads.