The domain vxh888.com was registered through Porkbun LLC on May 17, 2024 and currently resolves to the IP address 185.111.111.155. Its authoritative nameservers are stan.ns.cloudflare.com and sue.ns.cloudflare.com, indicating use of Cloudflare's DNS infrastructure. Independent security monitoring has placed the domain on a single blocklist and it is actively blocked by PhishDestroy, confirming that defensive networks are already aware of its malicious intent.
VirusTotal analysis shows that 1 of 91 scanning engines flagged the domain, providing additional corroboration of its risk profile. The domain appears in at least one public blocklist, reinforcing its malicious reputation. No public details are available regarding SSL certificate status, HTTP response codes, page title, or any observed landing page content, leaving the exact payload and lure mechanisms unconfirmed.
The lack of further telemetry means the specific phishing kit or targeted brand cannot be identified at this stage. Defenders should continue to deny network resolution to 185.111.111.155, enforce DNS filtering for vxh888.com, and update intrusion‑detection signatures to include the observed resolver and registrar attributes. Monitoring for any new indicators, such as changes in hosting or additional vendor detections, is recommended to maintain situational awareness of this active threat.