00800[.]vip

PhishDestroy has assessed 00800.vip as elevated risk due to its classification as a generic phishing threat. The domain was created on March 14, 2022, and resolved to IP address 188.114.96.3, hosted via Cloudflare. It is registered through Go Montenegro Domains, LLC and uses a Let's Encrypt SSL certificate (E7). VirusTotal reports 19 out of 95 security vendors flagging this domain, and it appears on two security blocklists. AlienVault OTX has recorded it in 15 threat intelligence pulses, indicating widespread recognition among security communities. Although the domain is currently offline, its past activity suggests it was used to deceive users into divulging sensitive information. PhishDestroy recommends that organizations block all traffic to 00800.vip and any subdomains, review logs for attempted connections, and educate users on recognizing generic phishing tactics such as suspicious URLs and unsolicited requests for credentials. Users who may have interacted with the domain should change passwords and enable multi-factor authentication immediately.