flightpatzvip[.]com

Analysis of flightpatzvip.com shows that the domain was registered on 11 March 2025 through Dominet (HK) Limited and is served by the Alibaba‑Cloud DNS resolvers ns7.alidns.com and ns8.alidns.com. The domain resolves to IP address 69.160.174.39, which is announced by AS59371 (Dimension Network & Communication Limited) and geolocated to Hong Kong. No TLS certificate is presented for the host, and an HTTP probe reports the service as taken offline at the time of observation. Google Safe Browsing classifies the site as a social‑engineering threat, and three of ninety‑five VirusTotal scanners have flagged the domain, confirming malicious intent.

Independent reputation services assign extremely low scores: Gridinsoft rates the domain 8 / 100 and Scamadviser 1 / 100, both indicating a high likelihood of fraud. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service. The combination of a recent creation date, low‑reputation registrar, lack of encryption, and multiple independent detections aligns with the generic phishing classification assigned in the intelligence feed.

No additional evidence such as page titles or brand references is available, leaving the exact payload or targeted brand undisclosed. Defenders should continue to block traffic to 69.160.174.39 and to flightpatzvip.com at the DNS and network layers, monitor for any re‑activation of the host, and consider adding the domain to local allow‑list exclusions only after a thorough manual verification. Ongoing observation of the registrar and hosting ASN is recommended to detect potential infrastructure reuse in future campaigns.