vertex-treasureplanet[.]click

The domain vertex-treasureplanet.click was registered on July 03, 2026 through Dynadot, LLC and remains active as of the report date, July 28, 2026. DNS resolution points to the IP address 188.114.96.3 and the authoritative nameservers are aiden.ns.cloudflare.com and sierra.ns.cloudflare.com, indicating use of Cloudflare's DNS infrastructure. The site presents a page titled "Document," but no further content analysis is available, so the specific phishing payload or credential‑harvesting mechanisms have not been observed. Detection evidence shows that the domain appears on two security blocklists and is actively blocked by PhishDestroy and OpenPhish.

VirusTotal scans have recorded ten positive detections out of ninety‑one submitted scanners, reinforcing the assessment of malicious intent. The threat classification is recorded as generic phishing with a high risk rating. Uncertainties include the absence of HTTP response codes, SSL certificate details, Safe Browsing verdicts, and any attribution to known phishing kits or campaigns.

Consequently, defenders should treat the domain as hostile: immediately block the domain and its associated IP at perimeter defenses, add the observed nameservers to monitoring lists, and ensure that threat intelligence platforms ingest the blocklist entries from PhishDestroy and OpenPhish. Ongoing DNS traffic to the Cloudflare nameservers should be logged for potential correlation with other malicious hosts. Continuous re‑scanning on VirusTotal and similar services is advised to capture any evolving detection signatures.