vezogex[.]com

vezogex.com was registered on 21 February 2026 and shortly thereafter began serving content that triggered multiple security detections. Infrastructure analysis shows the domain resolves to the IP address 104.21.16.63, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented by the host is identified as WE1, indicating a standard Cloudflare‑issued certificate without further validation. VirusTotal reports that 13 of 95 scanning engines flagged the domain as malicious, reflecting a moderate consensus among automated scanners.

AlienVault OTX lists the domain in a single threat‑intel pulse, and it appears on one public blocklist. PhishDestroy has also taken the domain offline, confirming that the site is no longer reachable at the time of this assessment. The observed activity aligns with a social media phishing campaign, where attackers typically lure victims through fraudulent messages that request credential submission. While the exact landing page content has not been captured, the combination of DNS resolution, certificate data, and multiple vendor detections provides concrete evidence of malicious intent.

Uncertainty remains regarding the specific social platforms targeted and the payload delivered after credential capture, as no page title or additional indicators have been disclosed. Defenders should add 104.21.16.63 to network blocklists, enforce DNS filtering for vezogex.com, and monitor for any resurgence of the domain or associated IP addresses. Continuous threat‑intel feeds, including OTX and PhishDestroy alerts, should be consulted for updates, and any inbound traffic from the listed IP should be inspected for anomalous authentication attempts.