filevelvettractor[.]sbs

Analysis of filevelvettractor.sbs indicates an active generic phishing infrastructure observed as of August 05, 2026. The domain was registered on May 04, 2026 through Dynadot Inc and is delegated to Cloudflare nameservers jo.ns.cloudflare.com and nick.ns.cloudflare.com. DNS resolution points to the IPv4 address 188.114.97.10, which is the sole hosting endpoint identified for the campaign. VirusTotal records show that 18 of 91 scanned security vendors have flagged the domain, demonstrating a moderate consensus among detection engines.

The domain is listed on one external security blocklist and is actively blocked by the PhishDestroy service, confirming its inclusion in threat intelligence feeds. No public SSL certificate details, HTTP response codes, or page title information have been disclosed, leaving the exact web content and transport security characteristics unverified. The lack of Safe Browsing or Open Threat Exchange references further limits visibility into broader ecosystem detection.

Defenders should prioritize immediate containment by adding filevelvettractor.sbs to DNS sinkhole or firewall deny lists, and should also consider blocking the associated IP address 188.114.97.10 to mitigate potential collateral traffic. Continuous monitoring for DNS queries or outbound connections to the domain or IP is advised, as well as periodic re‑evaluation of threat intelligence sources for any update to detection counts or additional blocklist listings. Given the recent registration date and the existing detection footprint, the site should be treated as high‑risk and incorporated into endpoint and email security policies as a known malicious indicator.