vaultx-unlocked[.]com

vaultx-unlocked.com was registered on July 10, 2026. The domain remains active and resolves to the IPv4 address 103.42.108.46, which is hosted in Australia and associated with Synergy Wholesale PTY LTD. The lack of an SSL certificate means traffic is unencrypted, and an HTTP request to the root returns a 403 status code, indicating the server is deliberately denying access to unauthenticated clients. Independent analysis shows that 2 of 95 security vendors on VirusTotal have flagged the domain as malicious, and AlienVault OTX includes it in two separate threat pulses. The domain is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the consensus that the site is being used for malicious credential harvesting. Infrastructure details reveal the domain is managed by three nameservers – ns1.nameserver.net.au, ns2.nameserver.net.au, and ns3.nameserver.net.au – all of which are operated by the same registrar, Synergy Wholesale Accreditations Pty Ltd. The registration record does not disclose additional contact information, and the absence of TLS further simplifies network‑level interception for defenders. While the current HTTP response does not expose a phishing landing page, the combination of recent registration, the high‑risk classification, and multiple independent detections strongly suggest the domain is being used for credential‑stealing campaigns. Defenders should add the domain to network deny lists, monitor DNS queries for lookups, and consider sinkholing the associated IP address. Continuous re‑evaluation is advised in case the site begins serving active payloads.