vecatex[.]xyz

The domain vecatex.xyz was registered on 21 February 2026 and is currently listed as offline. Passive DNS shows the name resolving to the Cloudflare address 104.21.112.1, which belongs to ASN 13335 (Cloudflare, Inc.) and is geolocated in the United States. The TLS certificate presented by the host is identified as “WE1”, indicating a standard Cloudflare‑issued certificate without additional validation. The only visible HTML artifact is the page title “Nur einen Moment…”, which does not disclose any brand or service and suggests a generic waiting or redirect page. VirusTotal reports that two of ninety‑three scanning engines have flagged the domain, a modest detection rate that nevertheless aligns with its classification as a generic phishing site.

Gridinsoft assigns the domain a trust score of zero out of one hundred, and the name appears on a single external blocklist. PhishDestroy also reports the domain as blocked. No further intelligence such as Safe Browsing status, OTX tags, or registrar details is available in the current dataset. Analysis indicates that the infrastructure relies on shared Cloudflare hosting, a common tactic for rapid deployment and concealment of malicious sites.

The low detection count and zero trust score suggest that the payload or credential‑harvesting page has not been widely observed, but the presence on a blocklist and the confirmed phishing classification warrant caution. Defenders should add vecatex.xyz to DNS‑ and URL‑filtering policies, monitor traffic to the associated IP address 104.21.112.1 for any anomalous connections, and consider extending blocklist subscriptions to include this indicator. Because the site is offline, active probing is not possible at this time; however, periodic re‑resolution and certificate checks are recommended to detect any re‑activation. Continuous correlation with threat‑intel feeds will help identify potential campaign expansions that reuse the same hosting infrastructure.