vanisprimelimited[.]com

Analysis indicates that vanisprimelimited.com is an active credential phishing site. The domain resolves to IP 163.61.188.7, which is hosted in the United States under ASN 153568 (NEW DHAKA HARDWARE). Registration was performed through Namecheap Inc on October 16 2024, and the domain employs LiteSpeed web server with PHP, Google Hosted Libraries, Google Font API, Smartsupp, and HTTP/3. The site presents a TLS certificate from Let’s Encrypt (YR2) and returns HTTP 200 for the root URL, with the page title "Vanisprime Limited | Trusted Investment Company". Security telemetry shows seven of ninety‑one VirusTotal scanners flagging the domain, and AlienVault OTX lists it in two threat‑intelligence pulses. Additional defensive signals include a Gridinsoft trust score of 0/100, inclusion on one security blocklist, and an active block by PhishDestroy. Nameservers are dns1‑4.lytehosting.com, and the MX record points to the same domain. While the precise phishing payload and targeted credentials are not yet observed, the combination of hosting, reputation, and detection data classifies the domain as high‑risk credential phishing. Defenders should immediately block the domain and its resolved IP at perimeter firewalls and DNS resolvers, monitor for outbound connections to the IP, and consider sinkholing the address. Updating threat‑intel feeds with the domain, associated IP, and observed nameservers will improve detection across the environment. Continuous re‑evaluation is advised as more content becomes available.