first-vest[.]com

The domain first-vest.com was registered through Tucows Domains Inc. on April 05, 2026 and currently resolves to the IPv4 address 64.20.45.186. Authoritative name servers listed for the domain are dns2040a.trouble-free.net and dns2040b.trouble-free.net. Threat intelligence feeds classify the domain as part of an active generic phishing operation, and its status is recorded as active on the report date of July 27, 2026.

The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one defensive platform has taken remediation action. VirusTotal analysis shows that one of ninety‑one security vendors flagged the domain, providing additional confirmation of malicious intent. No public page title, SSL certificate details, or HTTP response data are presently available, so the exact content and landing page behavior remain unverified.

The absence of further contextual indicators such as brand targeting or specific phishing kit signatures limits the depth of attribution, but the combination of recent registration, dedicated name servers, single‑vendor detection, and inclusion on a blocklist strongly suggests a purpose‑built phishing infrastructure. Defensive teams should add first-vest.com to DNS and URL filtering policies, monitor traffic to the associated IP address 64.20.45.186, and consider sharing the indicator with upstream threat‑sharing communities. Continued observation of the domain’s resolution patterns and any future VirusTotal or blocklist updates is recommended to assess potential escalation or changes in the campaign’s tactics.