happyandinning[.]vip

This domain, happyandinning.vip, was registered on July 16 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is served from the IP address 104.21.15.5. The authoritative nameservers are leo.ns.cloudflare.com and macy.ns.cloudflare.com, indicating that the domain is using Cloudflare’s DNS and CDN infrastructure. VirusTotal records show that the domain has been examined by 95 independent scanning engines; at the time of analysis none of those engines reported a detection. The same domain is listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy repository, confirming that at least one community‑maintained feed considers the address malicious. No additional public intelligence sources such as Google Safe Browsing, OTX, or SSL/TLS grade services have published findings for this host, and the HTTP response details, page title, or content have not been disclosed in the available data set. Consequently, the current evidence base consists of registration metadata, hosting resolution, blocklist presence, and the lack of detections in a broad vendor scan. Defenders should treat happyandinning.vip as a potentially hostile resource pending further investigation. Recommended actions include adding the domain to outbound filtering rules, ingesting the blocklist entry into internal threat‑intel feeds, and monitoring network traffic for connections to 104.21.15.5. Continuous re‑evaluation is advised, given the domain’s recent creation date and active status, to capture any future changes in detection status or additional intelligence that may emerge.