vipsteroidi[.]com

Analysis of the domain vipsteroidi.com indicates it was registered on February 27, 2026, through NiceNIC International Group Co., Limited, and has been associated with generic phishing activity. As of July 25, 2026, the domain resolves to the IP address 104.26.12.133, hosted on Cloudflare's network (AS13335) in the United States. The domain's nameservers, elaine.ns.cloudflare.com and tom.ns.cloudflare.com, further confirm its reliance on Cloudflare infrastructure. The SSL certificate is issued by Let's Encrypt (serial number E7), a common choice for both legitimate and malicious domains due to its accessibility. The domain currently returns an HTTP 403 status with the page title 'Attention Required!

| Cloudflare,' suggesting it is either parked, restricted, or taken offline following detection. Gridinsoft assigns it a trust score of 0/100, reflecting high suspicion. The domain appears on one security blocklist, specifically PhishDestroy, and is flagged by one of 93 security vendors on VirusTotal. No additional brand targeting, phishing kit, or specific scam type is identified in the available data, and the exact content of the site prior to takedown remains unanalyzed.

Defenders should treat this domain as part of a broader phishing infrastructure, particularly given its use of Cloudflare for hosting and DNS. The registration through NiceNIC, a registrar frequently used in low-reputation domains, and the domain's rapid detection by security vendors further support its classification as malicious. Network-level blocking of 104.26.12.133 and monitoring for related domains registered via the same registrar are recommended mitigations. The domain's current offline status may indicate remediation, but historical associations should still be considered in threat intelligence correlations.