velodrome[.]info

The domain velodrome.info is flagged as a high‑risk generic phishing infrastructure. Registration data shows the domain was created on May 26 2026 and was acquired through NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS resolution points to the IPv4 address 188.114.97.3, and the domain is served by Cloudflare name servers ian.ns.cloudflare.com and romina.ns.cloudflare.com, indicating reliance on Cloudflare’s DNS and edge services.

Threat intelligence indicates the domain is listed on a single public security blocklist and has been actively blocked by the PhishDestroy mitigation service. VirusTotal scans reveal that four of ninety‑one security vendors have flagged the domain as malicious, providing independent corroboration of its abusive nature. As of the report date, July 27 2026, the site remains operational, but no publicly available page title, SSL certificate details, HTTP status codes, or content analysis have been published, leaving the exact phishing lure and targeted brand unspecified.

The lack of additional context means defenders cannot attribute a specific credential‑harvesting technique or victim profile, but the aggregate evidence—registrar information, IP address, blocklist presence, vendor detections, and active blocking—supports a definitive malicious assessment. Recommended mitigations include adding velodrome.info to DNS‑based deny lists and network firewalls, enforcing URL filtering policies to block outbound requests to the domain, and monitoring traffic to the associated IP address 188.114.97.3 for anomalous patterns. Continuous re‑evaluation is advised as further analysis may uncover additional indicators such as malicious payloads, credential‑stealing forms, or expanded infrastructure components.