bigvst[.]org

bigvst.org was registered on 25 September 2025 through Hostinger Operations UAB. The domain resolves to 172.67.131.111, an address owned by Cloudflare, and its authoritative nameservers are armando.ns.cloudflare.com and piper.ns.cloudflare.com, indicating that the site is served behind Cloudflare’s CDN. PhishDestroy has already added the domain to its blocklist, and it appears on a separate security blocklist, confirming that at least one threat‑intelligence provider considers the site malicious.

VirusTotal records show that the domain was submitted to 91 scanning engines; none of the engines reported a detection at the time of analysis, but the absence of detections does not constitute a safety assurance. No public information is available regarding the site’s SSL certificate, HTTP response codes, page title, or any Safe Browsing or OTX entries, so the exact content and the phishing lure remain unverified. The available evidence points to a recently created domain that is being used to host a phishing operation, likely leveraging Cloudflare’s infrastructure to obscure the origin of the malicious server.

Defenders should treat the domain as hostile: add it to network and email blocklists, monitor DNS queries for the domain and its associated IP, and continue to scan the URL with updated detection engines. Ongoing observation is recommended to capture any changes in hosting, content, or detection status.