# details-virtauls.xyz — SUSPICIOUS

> details-virtauls.xyz posed as Virtuals Protocol to deceive users. Learn about this phishing domain and how to stay protected.

## Summary
PhishDestroy has identified details-virtauls.xyz as a medium-risk phishing domain that impersonated the Virtuals Protocol platform, which offers services related to AI agents. The domain was registered recently and has since been taken offline, but its presence on three security blocklists highlights the potential threat it posed to unsuspecting users.

This phishing scheme worked by using the page title "Create, co-own, interact with AI Agents | Virtuals Protocol" to lure victims into believing they were interacting with a legitimate AI-focused service. The domain’s registration details and IP address (188.114.96.3) further indicate its suspicious nature. The goal was likely to trick users into divulging sensitive information or credentials under false pretenses.

If you have visited details-virtauls.xyz, it is crucial to remain vigilant. Avoid entering any personal or financial details on suspicious platforms. Users should run comprehensive antivirus scans and consider changing passwords if any credentials were submitted. Staying informed about such deceptive domains helps reduce the risk of falling victim to phishing attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Create, co-own, interact with AI Agents | Virtuals Protocol

## Domain Intelligence
- Registered: 2026-03-12 17:07:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: june.ns.cloudflare.com randy.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["alphaMountain.ai", "Forcepoint ThreatSeeker", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/zhKmD4M2/9ad06c170213.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e735982c-1ee8-41ec-9fde-bfd8a022268d
- PhishDestroy: https://phishdestroy.io/domain/details-virtauls.xyz/
- LLM endpoint: https://phishdestroy.io/domain/details-virtauls.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/details-virtauls.xyz/
Last updated: 2026-03-19