entry[.]virtualwaifus[.]xyz

Analysis as of July 24, 2026 shows that entry.virtualwaifus.xyz is flagged for brand impersonation of Discord. The domain was registered on October 19, 2025 through NameCheap, Inc. and currently resolves to IP address 34.120.54.55, which belongs to AS396982 Google LLC and is geolocated in the United States. The hosting infrastructure is served by Cloudflare, as indicated by the authoritative nameservers earl.ns.cloudflare.com and laura.ns.cloudflare.com. No TLS certificate is presented for the site, meaning HTTPS connections are not available.

An HTTP request to the host returns a page with the title "Discord", matching the declared brand target. The site has been taken offline, but historical data shows it was listed on at least one security blocklist and is actively blocked by PhishDestroy. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme risk. VirusTotal analysis recorded five detections out of ninety‑five scanning engines, confirming malicious classification by multiple vendors.

The combination of a low trust score, blocklist presence, and multiple vendor detections indicates a high likelihood that the domain was used to lure victims into providing Discord credentials or related information. Uncertainty remains regarding the specific phishing kit or payload, as no additional forensic artifacts have been released. Defenders should continue to block the domain at network perimeter devices, update URL filtering policies, and monitor for any residual traffic to the associated IP address. Incident response teams should also consider searching for related Discord credential theft indicators in logs, given the brand‑specific impersonation observed.