velnorith[.]vip

This domain, velnorith.vip, is assessed as a high-risk threat for credential theft phishing. The domain is actively being used to collect sensitive user information, such as usernames and passwords, potentially leading to unauthorized access and data breaches.

Analysis indicates that velnorith.vip has been flagged by 1 out of 95 security vendors on VirusTotal, suggesting a relatively low detection rate. The domain is registered through NameSilo, LLC, and was created on May 23, 2026. It resolves to the IP address 104.21.63.200 and appears on 1 security blocklist, specifically PhishDestroy. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites, but the low detection rate and presence on a blocklist raise significant concerns.

To mitigate the risks associated with this credential theft phishing domain, users should avoid clicking on any links or entering personal information on any pages related to velnorith.vip. Network administrators should implement DNS filtering and block the IP address 104.21.63.200 to prevent access to the site. Additionally, regular phishing awareness training and the use of multi-factor authentication can significantly reduce the likelihood of successful credential theft attempts.