vulcan-proces[.]xyz

Analysis indicates that vulcan-proces.xyz is currently active and has been classified as a generic phishing site. The domain was registered on March 27, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the Cloudflare edge IP 188.114.97.3, which is associated with the CloudFlare, Inc. network in Canada. Authoritative nameservers are vida.ns.cloudflare.com and wesley.ns.cloudflare.com, confirming use of Cloudflare DNS. HTTP requests receive a 403 response and the TLS certificate is issued by Google Trust Services under the WE1 identifier, showing a valid certificate but not mitigating the malicious intent. The site appears on one security blocklist and is specifically blocked by PhishDestroy. It has been referenced in a single AlienVault OTX pulse, and Gridinsoft assigns a trust score of 0 out of 100. VirusTotal reports that one of ninety‑four scanning engines flagged the domain, providing additional corroboration of malicious activity. The page title returned is “Just a moment…”, which offers no insight into the payload. No further content analysis is available. Given the combination of blocklist presence, low trust score, detection by multiple security vendors, and the phishing classification, defenders should treat vulcan-proces.xyz as hostile. Recommended actions include adding the domain to network deny lists, monitoring DNS queries for the associated IP and nameservers, and employing URL filtering to prevent user access. Continuous re‑evaluation is advised in case additional indicators emerge.