cake-recepte[.]icu

This domain, cake-recepte.icu, was registered on 21 February 2026 through Web Commerce Communications Limited and subsequently used in a generic phishing operation. The site presented the page title “Viper Vouchers – Turn Receipts into Rewards”, suggesting a voucher‑exchange lure. DNS resolution points to the IPv4 address 83.217.208.8, which belongs to the German network AS205775 operated by NEON CORE NETWORK LLC. No TLS certificate is associated with the host, indicating that all HTTP traffic is unencrypted.

The domain’s authoritative name servers are listed as ns‑cloud‑b1.googledomains.com, ns‑cloud‑b2.googledomains.com, and a partially reported ns‑cloud‑b3 entry. Security‑vendor scans on VirusTotal recorded 2 of 93 detections, confirming that at least two AV engines flagged the content as malicious. Independent blocklist feeds have listed the domain on three separate security blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL filtering solutions.

As of the report date, the site is taken offline, but the infrastructure remains observable. Defenders should add the domain and its resolving IP to network‑level deny lists, enforce HTTPS‑only policies for related traffic, and monitor for any re‑hosting attempts that reuse the same name‑server configuration. Ongoing observation of the associated IP range and the AS205775 owner is recommended to detect potential redeployment of the phishing kit.