wwwdeokhalikdhf[.]art

Analysis of wwwdeokhalikdhf.art performed on July 23, 2026 shows multiple indicators consistent with a phishing infrastructure. The domain was registered on February 21, 2026 and resolves to the IP address 178.128.255.225, which is allocated to DigitalOcean in the Netherlands (NL). Threat intelligence from AlienVault OTX references the domain in fourteen separate pulses, indicating that it has been observed across a range of feeds.

VirusTotal reports that fifteen out of ninety‑five scanning engines flag the domain as malicious, reinforcing the suspicion of abusive activity. The domain is currently taken offline, which prevents retrieval of HTTP headers, page titles, SSL certificates, or content snapshots; consequently no further site‑level artifacts are available for analysis. Defensive sources have already taken action: the domain is listed on one public security blocklist and is actively blocked by the PhishDestroy service.

While the presence of the domain on a blocklist and the VirusTotal detections provide concrete evidence of malicious intent, the lack of live content means that the specific phishing lure or target brand cannot be confirmed at this time. Defenders should continue to deny any network connections to 178.128.255.225, add wwwdeokhalikdhf.art to local and network‑wide blocklists, and monitor for any re‑registration attempts or related subdomains that resolve to the same hosting provider. Ongoing observation of OTX updates and future VirusTotal scans is advised to capture any changes in the threat profile.