iivouw[.]club

This domain, iivouw.club, is identified as a credential theft phishing operation targeting user login credentials. Analysis of the page title, 'Web Server's Default Page,' suggests either an incomplete deployment or an attempt to evade detection by leveraging default server configurations. No explicit brand impersonation or cryptocurrency drainer kit signatures were observed in the available metadata, though the domain's infrastructure aligns with known phishing patterns. The lack of a customized landing page may indicate an early-stage campaign or a placeholder for future malicious activity. Infrastructure analysis reveals technical indicators consistent with high-risk phishing domains. The domain resolves to the IP address 37.77.150.150, hosted by LLC Baxet in Russia, a provider frequently associated with malicious activity. It was registered through DYNADOT LLC on April 4, 2026, with a Let's Encrypt SSL certificate (R12) issued to secure communications. Detection metrics show 19 out of 95 security vendors on VirusTotal flagging the domain as malicious, while three independent blocklists have listed it. The domain does not appear in Google Safe Browsing (GSB) at the time of analysis, though this may reflect a lag in detection rather than benign status. As of the latest assessment, iivouw.club has been taken offline, likely due to hosting provider intervention or registrar enforcement actions. Despite its inactive status, residual risk remains due to the domain's recent registration and prior malicious classification. Organizations are advised to monitor for re-activation attempts, particularly under altered infrastructure or new SSL certificates. Network defenders should update blocklists to include the domain and associated IP address, while end-users should remain cautious of any future communications or redirects involving iivouw.club. Proactive threat hunting for related domains registered through the same registrar or hosted on adjacent IP ranges is recommended to mitigate potential follow-up campaigns.