vvclub[.]shop

This domain, vvclub.shop, is flagged as an active credential phishing site targeting users through a login interface labeled 'VClub | VClubshop Login' as indicated by the page title. Registered on March 7, 2026, through Key-Systems LLC, the domain remains operational with a Cloudflare-hosted infrastructure, resolving to IP 188.114.97.3 (AS13335, United States). Nameservers kelly.ns.cloudflare.com and kyle.ns.cloudflare.com, along with an SSL certificate issued by Google Trust Services (WE1), suggest the use of Cloudflare services for hosting and traffic proxying. Technologies detected include Bootstrap, Cloudflare Browser Insights, and HTTP/3, reinforcing the domain's reliance on Cloudflare's ecosystem. Analysis indicates the domain has been blocked by at least one security vendor (PhishDestroy) and appears on a single security blocklist. VirusTotal data shows 2 of 94 security vendors flagging the domain, though this does not constitute conclusive evidence of malicious activity. The Gridinsoft trust score of 28/100 further supports the assessment of elevated risk. No specific phishing kit or targeted brand beyond the 'VClub' reference in the page title has been confirmed. Defenders should treat this domain as a high-risk credential harvesting endpoint, particularly given its continued activity and Cloudflare-hosted infrastructure, which may obscure origin analysis. Monitoring for additional blocklist inclusions or shifts in hosting behavior is recommended.