vexyl[.]net

This domain, vexyl.net, is flagged as a generic phishing threat with a high risk level and remains active as of July 12, 2026. The domain was registered on April 21, 2026, through Fewmoretaps OU d/b/a Trustname.com, and resolves to IP address 172.67.219.50, which is associated with Cloudflare infrastructure and supports HTTP/3. The SSL certificate is issued by Google Trust Services, but the page title indicates an SSL handshake failure (error 525), suggesting the underlying server may be misconfigured or the certificate is not properly linked to the site's content. VirusTotal analysis shows 4 out of 95 security vendors flagging this domain as malicious, and it appears on at least two security blocklists, including PhishDestroy and BLP-Malware. AlienVault OTX records the domain in 22 threat intelligence pulses, indicating broad community reporting. The Gridinsoft trust score is 0 out of 100, reinforcing the assessment of high risk. Defenders should block this domain at the network level, monitor for any associated IP addresses or subdomains that may appear, and treat any emails or messages referencing vexyl.net as potential phishing lures. The exact phishing scheme (e.g., credential harvesting, malware delivery) is not yet determined from available data, but the combination of low vendor detection, recent registration, and SSL error suggests an active campaign that may evolve its infrastructure.