ru10[.]virt-chat[.]top

The domain ru10.virt-chat.top is currently active and presents a high‑risk generic phishing threat. The site returns HTTP 200 responses and is hosted on IP address 84.201.25.167, which belongs to ASN214036 (Ultahost, Inc.) located in Germany. Registration details show the domain was created on 27 October 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com, and the authoritative nameservers are helium.ns.hetzner.de, hydrogen.ns.hetzner.com, and oxygen.ns.hetzner.com, all operated by Hetzner. The TLS certificate is issued by Let’s Encrypt (R13), confirming the presence of HTTPS, but the certificate does not mitigate the phishing risk.

VirusTotal analysis flags the domain in 11 of 95 security vendor engines, indicating a measurable consensus of malicious behavior. The domain is listed on at least one external security blocklist and is actively blocked by the PhishDestroy service, reinforcing its classification as a phishing resource. Page metadata reveals the title "Виртуальный секс чат без регистрации – воплотите все свои фантазии на сайте virt-chat.com," which aligns with the reported generic phishing activity. Technical profiling shows the web server runs Nginx and incorporates Yandex.Metrika and Google Analytics tracking scripts, a common pattern for monetized malicious sites.

Gridinsoft assigns a trust score of 0 out of 100, further confirming the domain’s lack of legitimacy. While the exact phishing payload or credential‑harvesting mechanisms have not been publicly disclosed, the combination of flagged vendor detections, blocklist presence, and low trust scoring provides sufficient evidence for defensive action. Organizations should immediately block ru10.virt-chat.top at the DNS and proxy layers, consider blocking the associated IP 84.201.25.167, and monitor for any outbound connections to the domain.