vexio[.]top

The domain vexio.top was registered on February 21 2026 and is presently listed as offline. DNS resolution points to the IP address 104.21.73.158, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The hosting provider is Cloudflare, Inc. The domain appears on a single security blocklist and has been flagged by PhishDestroy. AlienVault OTX includes vexio.top in one threat‑intel pulse, indicating that the feed’s contributors have observed malicious activity associated with the host.

VirusTotal analyses show that 15 of 93 scanning engines returned a malicious verdict, reinforcing the suspicion of abuse. The TLS certificate presented by the site is identified as “WE1”, but no further certificate details are available. No public page title or content has been harvested, so the exact phishing lure or targeted brand cannot be confirmed at this time. Given the convergence of DNS, blocklist, OTX, and multi‑engine detection evidence, the domain should be treated as a confirmed phishing infrastructure.

Defenders should update local and cloud‑based URL filtering policies to block both the domain and its resolved IP address, monitor for any future resolution changes, and consider adding the host to internal threat‑intel feeds. Continuous observation of the IP range owned by Cloudflare is recommended, as the provider can host many unrelated customers and may be reused by other malicious actors. Until the domain is taken down permanently, any traffic that reaches the host should be denied or sandboxed for further analysis.