vpcardex[.]com

This domain, vpcardex.com, is currently under investigation for generic phishing activity. Registered on April 22, 2026, through Gname.com Pte. Ltd., it resolves to the IP address 92.113.23.67, located in Germany and associated with Hostinger infrastructure. The domain employs nameservers ns1.dns-parking.com and ns2.dns-parking.com, a configuration often observed in low-cost or disposable hosting setups. Analysis of the domain reveals the use of Hostinger CDN and HTTP/3, which may be leveraged to obfuscate malicious traffic or improve performance for phishing operations. The page title, 'Checking your browser before accessing. Just a moment...,' suggests the use of a browser fingerprinting or anti-bot mechanism, a technique commonly deployed to filter targets and evade automated security scans. As of July 12, 2026, the domain returns an HTTP 403 status, indicating access restrictions or a placeholder state, which may precede the activation of a phishing page. MX records point to mx1.hostinger.com and mx2.hostinger.com, a configuration that could facilitate email-based phishing campaigns or credential harvesting via spoofed communications. The domain is flagged by one security blocklist and assigned a trust score of 0/100 by Gridinsoft, though the absence of detections from other vendors does not confirm its safety. Defenders should monitor vpcardex.com for changes in behavior, such as the deployment of login forms, payment portals, or other interactive elements. Network-level blocking or sinkholing of the IP 92.113.23.67 may mitigate potential threats, while email filtering rules should account for spoofed messages originating from or referencing this domain. Further analysis is required to determine the specific brand or service being impersonated, as no definitive target has been identified in the available data.