venoria[.]top

Analysis of venoria.top indicates the domain is currently taken offline but retains multiple indicators of malicious intent. The domain was registered on August 12, 2025 through Gname.com Pte. Ltd. and is served by Cloudflare nameservers aria.ns.cloudflare.com and arturo.ns.cloudflare.com. DNS resolution points to IP address 172.67.215.84, which belongs to AS13335 Cloudflare, Inc., and is located in the United States. The site presented a TLS certificate issued by Google Trust Services under the WE1 authority, confirming the use of a valid HTTPS connection.

Front‑end technologies identified include Vue.js, HTTP/3 support and enforced HSTS, all typical of modern web applications but also frequently leveraged by abuse operators to increase credibility. Threat intelligence flags are substantial: VirusTotal recorded 15 detections out of 95 scanned scanners, and the domain appears on the PhishDestroy blocklist as well as a single additional security blocklist. AlienVault OTX lists the domain in one pulse, providing further corroboration of phishing activity. Gridinsoft assigned a trust score of 1 / 100, indicating an extremely low reputation.

The page title observed during the brief crawl was “CoinLtc”, suggesting a possible focus on cryptocurrency‑related lures, though no further content analysis is available. Given the convergence of registrar, hosting, SSL, and detection data, defenders should treat venoria.top as a high‑confidence phishing indicator. Recommendations include adding the domain to internal blocklists, monitoring DNS queries for the associated Cloudflare IP range, and correlating any login‑credential submissions that reference “CoinLtc” with this indicator. Continuous re‑scanning is advised in case the site is re‑hosted or re‑activated, and any alerts from endpoint or web‑gateway solutions that reference the domain should be escalated for investigation.