vbyyuk[.]click

This domain, www.vbyyuk.click, was registered on July 05 2026 through Spaceship, Inc. and is currently resolving to the IPv4 address 47.242.217.10, which belongs to ASN 45102 operated by Alibaba (US) Technology Co., Ltd. and is geolocated in Hong Kong. The authoritative nameservers are launch1.spaceship.net and launch2.spaceship.net, both consistent with the registrar’s infrastructure. An HTTP GET returns status code 200 and the page title is the Chinese characters “首页”, indicating a generic home‑page label; no TLS certificate is presented, meaning the site is served over plain HTTP.

The domain appears on a single public blocklist and has been explicitly blocked by the PhishDestroy feed. VirusTotal analysis shows that 11 of 91 scanned security engines have flagged the host, reinforcing the malicious assessment. The available intelligence classifies the activity as generic phishing, but the exact credential‑capture vector, target audience, or lure content have not been disclosed.

Consequently, the primary uncertainty concerns the specific payload delivered to victims and whether the site hosts additional malicious resources beyond the observed landing page. Defenders should add 47.242.217.10 and www.vbyyuk.click to network‑level deny lists, enforce HTTP‑to‑HTTPS upgrades where possible, and monitor for any new DNS or hosting changes. Continuous re‑scanning with multi‑engine services is advised to capture evolving detection scores, and any observed credential submissions should be forwarded to incident‑response teams for forensic triage.