vip[.]ashoo[.]vegas

The domain vip.ashoo.vegas is currently flagged as a generic phishing site. Registration data shows the domain was created on 2023-12-04 through Namecheap Inc, and its authoritative name servers are listed as donovan.ns.cloudflare.com, nicole.ns.cloudflare.com, pat.ns.cloudflare.com, and piers.n, indicating use of Cloudflare’s DNS infrastructure. DNS resolution points to the IPv4 address 188.114.96.10, which is the sole host observed for this domain.

Threat intelligence sources have placed the domain on a single blocklist, specifically PhishDestroy, confirming that at least one security vendor has taken active mitigation steps. VirusTotal records indicate that the domain has been scanned by 91 independent vendors, none of which have reported a detection at the time of analysis; this absence of detections does not constitute a reliability indicator and should be interpreted with caution. No additional public signals such as Safe Browsing alerts, Open Threat Exchange entries, SSL certificate details, or HTTP response codes are presently available.

Consequently, the observable attack surface is limited to the domain name, its registration profile, and the hosting IP address. Defenders should incorporate the domain into URL filtering rules, update DNS sinkhole configurations to return NXDOMAIN or a safe redirect, and monitor traffic for outbound connections to 188.114.96.10. Continuous re‑evaluation is recommended, as the domain remains active and could be leveraged in future phishing campaigns targeting credential harvest or malicious payload delivery.