2088p[.]vip

Analysis indicates that the domain 2088p.vip is currently active and serving HTTP 200 responses with the page title “welcome!!”. The host resolves to 188.114.96.3 and is fronted by Cloudflare (nameservers jewel.ns.cloudflare.com, colin.ns.cloudflare.com). The TLS certificate is issued by Google Trust Services under the WE1 trust store, confirming a valid HTTPS endpoint. Registrant information shows the domain was registered through Spaceship, Inc., and the IP is geolocated to Canada (Cloudflare infrastructure). VirusTotal reports 19 of 91 scanners flagging the domain, and it is listed on at least one public phishing blocklist (PhishDestroy). No additional malware or exploit payloads have been observed, and the site’s content beyond the title has not been publicly disclosed. Defenders should immediately block 2088p.vip at the network perimeter, add the IP 188.114.96.3 to deny lists, and monitor DNS queries for the domain. Correlate any authentication attempts or credential submissions against this host, and consider sharing the indicator set with internal threat‑intel teams and external feed providers. Ongoing monitoring of Cloudflare‑associated IP ranges for similar activity is recommended.