As of July 28, 2026, the domain marketvests.com is confirmed to be a phishing site. Infrastructure analysis reveals that the domain is registered through Dynadot Inc and was created on January 24, 2026. The domain is currently active and resolves to the IP address 188.114.96.3.
Nameservers for the domain include cullen.ns.cloudflare.com and sue.ns.cloudflare.com, indicating the use of Cloudflare for DNS management. The domain appears on one security blocklist, specifically PhishDestroy, which suggests it has been identified as a threat by at least one security provider. VirusTotal data shows that 15 of 91 security vendors have flagged this domain as malicious, indicating a high level of suspicion among the security community.
While the exact content of the site has not been analyzed, the high number of detections and the presence on a security blocklist suggest that the domain is actively being used for phishing activities. Defenders should block access to this domain and monitor for any related phishing campaigns or suspicious communications. Given the domain's recent creation date and active status, it is recommended to perform a more detailed inspection and consider additional defensive measures to protect against potential threats.