vektor[.]bar

Analysis of the domain vektor.bar indicates that it is currently active and associated with a generic phishing campaign. The domain was registered on April 08, 2026 through NAMECHEAP INC and is served by the authoritative nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. DNS resolution points to the IP address 199.247.18.52, which is the sole host observed for this infrastructure.

The domain appears on one public blocklist and is actively blocked by the PhishDestroy service, confirming that security operators have identified it as malicious. A VirusTotal scan submitted the domain to 91 antivirus and URL‑reputation engines; none of the scanners raised a detection at the time of analysis, but the absence of detections does not constitute evidence of benign behavior. The registration details, hosting information, and blocklist presence collectively provide sufficient indicators for defensive tooling to flag traffic to vektor.bar as suspicious.

At present, no public SSL certificate details, HTTP response codes, page title, or additional threat‑intel feeds such as OTX are available, leaving the content of the site and any downstream payloads unverified. Defenders should continue to block the domain at network perimeters, update URL filtering rules to include the observed IP address, and monitor the associated nameservers for any changes. Further investigation, including live site inspection and capture of any credential‑ harvesting pages, is recommended to fully characterize the phishing payload and to assess whether the infrastructure expands to additional domains or IP ranges.