alltvacation[.]org

Alltvacation.org is currently active and serves a page titled “AT Vacation – Book Your Flights.” The domain was registered on August 24 2025 through Dynadot LLC and resolves to IP 198.23.193.170, which belongs to AS36352 (HostPapa). The authoritative nameservers are dns1.geebytesdns.com and dns2.geebytesdns.com, and the site presents a valid Let's Encrypt certificate (E8) while using LiteSpeed web server, Alpine.js, and HTTP/3. Reputation services assign a trust score of 1 / 100 (Scamadviser) and 1 / 100 (Gridinsoft), and the domain appears on a single security blocklist. VirusTotal analysis shows that 7 of 95 scanned engines flagged the domain, indicating a moderate level of detection. AlienVault OTX records the domain in one threat‑intel pulse, and PhishDestroy has already blocked it. The combination of low trust scores, multiple vendor detections, and inclusion on blocklists aligns with the classification of a generic phishing operation targeting travelers. Defenders should add the domain and its IP to deny‑list filters, monitor outbound DNS queries for the host, and enforce email security controls that block messages containing references to “AT Vacation” or similar travel‑booking language. Continuous monitoring of the certificate and hosting changes is advised, as the infrastructure could be leveraged for credential harvesting or malware delivery in future campaigns.