vinedrop[.]net

Analysis of vinedrop.net, created on February 21 2026, shows a domain that was actively serving a suspected phishing page before being taken offline. The domain is delegated to Cloudflare name servers chip.ns.cloudflare.com and reza.ns.cloudflare.com and resolves to IP address 104.21.13.107, which belongs to AS13335 Cloudflare, Inc. in the United States. HTTP requests return a 403 status code, and the page title presented by the server is "Suspected phishing site | Cloudflare," confirming that the site was flagged by the hosting provider as malicious. The site used Cloudflare’s infrastructure and HTTP/3, and its TLS certificate was issued by Google Trust Services under the WE1 label, indicating a valid HTTPS handshake despite the malicious intent.

A Gridinsoft trust score of 0 out of 100 further underscores the poor reputation of the domain. VirusTotal scans identified the domain as malicious, with four of ninety‑three security vendors flagging it. Independent blocklists PhishDestroy and ScamSniffer have also listed vinedrop.net, and the domain appears on two additional security blocklists. Registration was performed through OwnRegistrar, Inc., and no further registrar‑level anomalies are reported.

No publicly available evidence describes the specific phishing content, target brand, or credential‑harvesting mechanisms, leaving the exact payload and victim profile uncertain. Defenders should immediately block traffic to 104.21.13.107 and add vinedrop.net to local deny‑lists, monitor for any re‑registration or redeployment of the domain, and continue to reference the listed blocklists for detection. Ongoing surveillance of Cloudflare‑hosted assets for similar page titles or HTTP 403 responses is advised to catch potential re‑use of this infrastructure.