vpn4[.]my

As of July 25, 2026, the domain vpn4.my is flagged as a generic phishing domain with an elevated risk level. This domain was created on February 21, 2026, and has been taken offline. The current status of the domain is offline, which may indicate that the threat has been mitigated, but this does not guarantee the domain is safe, as it could be reactivated at any time. The domain resolves to the IP address 186.2.166.73, which is located in the United Arab Emirates and is associated with the ASN AS59692 IQWeb FZ-LLC. Infrastructure analysis reveals that the domain was hosted using PHP and the Apache HTTP Server, with additional technologies including jQuery UI, jQuery CDN, jQuery, Google Tag Manager, and Contentsquare.

The page title for the domain was 'Mamma.com Search - Trust Mamma to provide the best search results,' which is unusual given the domain's name and the reported threat. This discrepancy may suggest that the domain was being used to masquerade as a legitimate search engine. The domain appears in one threat intelligence pulse on AlienVault OTX and is listed on one security blocklist, specifically PhishDestroy. While the domain is currently offline, security professionals should remain vigilant and monitor for any signs of reactivation.

Defenders should also ensure that their security policies and tools are updated to block this domain and educate users about the risks of phishing attacks. The domain's SSL certificate is classified as R12, which may indicate a higher level of sophistication in the phishing operation. Given the minimal detections and the domain's current offline status, further investigation is recommended to understand the full scope of the threat. However, the available evidence strongly suggests that the domain was used for phishing activities and should be treated with caution.