vavadansxt[.]com

This report documents the ongoing investigation into vavadansxt.com, a domain associated with generic phishing threat indicators as of July 28, 2026. The domain was registered on July 23, 2026, through Fewmoretaps OU d/b/a Trustname.com and remains active. DNS records show the domain resolves to IP address 85.121.149.94 and is served via Cloudflare nameservers (eugene.ns.cloudflare.com and faye.ns.cloudflare.com). Currently, the domain is flagged on a single security blocklist, specifically by PhishDestroy.

While the domain has been scanned by 91 vendors on VirusTotal, with none currently raising alerts, this absence of detections does not confirm that the domain is benign. There are no further blocklists, Safe Browsing warnings, OTX entries, HTTP status, or SSL certificate details noted in the available intelligence. There is no information on the site's actual content, as page title, scam kit details, or targeted brand are not present in the current dataset. The observable infrastructure and recent creation date may warrant caution, especially since the domain is under active investigation due to its presence on a phishing-specific blocklist.

Defenders should continue monitoring for changes in detection coverage and further intelligence from threat feeds. Until additional technical evidence is gathered, network administrators are advised to treat vavadansxt.com as potentially hostile, restrict access, and update security controls accordingly. Investigation should remain open pending further analysis of web content and emerging threat intel.