everydayvvdose[.]shop

This domain, everydayvvdose.shop, is currently classified as a high‑risk generic phishing site and remains active as of the report date 23 July 2026. Infrastructure analysis shows that the domain resolves to the IPv4 address 23.227.38.65 and is hosted behind Cloudflare DNS services, using the authoritative name servers carter.ns.cloudflare.com and kristin.ns.cloudflare.com. The domain has been listed on a single security blocklist and is actively blocked by the PhishDestroy filtering service. VirusTotal data indicates that one out of ninety‑one scanned security vendors flagged the domain, confirming malicious behavior despite a low detection count.

No additional public threat‑intelligence sources such as OTX or Google Safe Browsing entries were observed for this indicator. The limited detection footprint suggests that the malicious campaign may be newly deployed or operating under a low‑profile infrastructure. Defenders should add everydayvvdose.shop to perimeter blocklists, enforce DNS‑level filtering, and monitor outbound connections to the associated IP address 23.227.38.65. Continuous re‑scanning with multi‑engine services is advised to capture any changes in detection rates.

Organizations employing email security gateways should flag any messages containing links to this domain and quarantine them pending further analysis. Further investigation is required to determine whether the site serves a credential‑harvesting page or redirects to additional malicious hosts, as the page title and SSL fingerprint have not been published. Because the site’s content, SSL certificate details, and HTTP response codes have not been publicly disclosed, analysts should treat those aspects as unknown and prioritize network‑level controls until additional forensic evidence becomes available.