depinsim.com 
pinecrest-apartments.com 
gmcapital.live 
wtnforum.net 
onion.live 
darkdotweb.com 
pulsenotch.com 
IC3 del FBI
Denunciar delitos cometidos a través de Internet en los Estados Unidos
Federal tips line1-800-CALL-FBI
ABUSE NOTICE · 7D+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 15 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Elapsed since first report
15 days
Reports sent
1
Current status
HTTP 301 at latest stored check
Seguridad de dominio e inteligencia sobre amenazas
blr5[.]vip
“永不言休_无限精彩—为极致成就而生”
Veredicto de amenaza
Crítico
Puntuación de evidencia 80/100
Disponibilidad
Último activo conocido
Última observación de accesibilidad almacenada
Señales de riesgo
VirusTotal detecciones: 6/91
Suplantación de marca: Google
Último activo conocido
Resumen de las pruebas
CRÍTICO
On 27 July 2026 the investigative team assessed the domain blr5.vip, identified as a high‑risk generic phishing infrastructure. The domain was registered through GoDaddy.com, LLC and first created on 20 December 2017. Its authoritative name servers are ns1.zndns.com, ns2.zndns.com, ns3.zndns.com, ns4.zndns.com, vip1.zndns.com and vip2.zndn, indicating reliance on the ZNDNS hosting service. DNS resolution continues to point to the IPv4 address 13.75.42.220, confirming that the host remains reachable.
The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy service, demonstrating that at least one defensive feed has flagged it. VirusTotal analysis shows that three out of ninety‑one scanned security vendors have reported the domain as malicious, providing independent confirmation of its dangerous nature. No publicly available data currently describes the web content, page title, SSL certificate, HTTP response codes, or any associated malware kits. Consequently, the specific phishing lure and targeted brand remain unknown.
The lack of additional intelligence from services such as Google Safe Browsing, OTX, or commercial trust‑score providers further limits the contextual understanding of the campaign. Given the confirmed active status, the persistent DNS resolution to a known malicious IP, and the multiple independent detections, defenders should treat blr5.vip as hostile. Recommended actions include adding the domain and its IP address to perimeter block lists, monitoring DNS queries for any internal resolutions, and employing network‑level filtering to prevent outbound connections to 13.75.42.220. Continuous re‑evaluation of the domain is advised, as future changes to the hosting or content could alter its threat profile.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-20260727-9785A4- Título de la página capturada
- New Private Tab
- Artefacto PDF
- Evidencia en PDF
Fundamento jurídico
Texto completo de la evidencia
Policy Violations:
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (US):
18 U.S.C. § 1343 - Wire Fraud
18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA)
15 U.S.C. § 45 - FTC Act (Deceptive Practices)
Federal laws prohibit wire fraud, computer fraud, and deceptive business practices.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (US):
18 U.S.C. § 1343 - Wire Fraud
18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA)
15 U.S.C. § 45 - FTC Act (Deceptive Practices)
Federal laws prohibit wire fraud, computer fraud, and deceptive business practices.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
VirusTotal
6 det.
Certificado TLS
Let's Encrypt
Edad
8.6 yr
Estado observado
Último activo conocido HTTP 301
DestroyList
Incluido
Reports Sent
1
Data Coverage
VirusTotal
6 / 91
URLQuery
checked — no detections recorded
PhishStats
no comprobado
OTX
no community references
CF Radar
scan completed
URLScan capture
informe almacenado
URLScan verdict
Análisis finalizado
Bloqueos de DNS
no comprobado
TLS
valid certificate, 46d
WHOIS
105 mo old
Captura de pantalla
4 captures · 3 sources
Cadena de redireccionamientos
no sondeado
Proceso de respuesta ante amenazas Pipeline
Descubrimiento
Checks
Reports
Disponibilidad
11/12
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Primer registro
Primer valor almacenado: Accesible
Captura guardada
Inteligencia de dominios
Dominio
URLScan Verdict
Análisis finalizado
score 0 report ↗
Servidor / ASN
AS8075 Microsoft Corporation
Reputación de IP
IP abuse confidence 0/100 0 reports checked 27/07/2026
Registrador
GoDaddy
(US)
(US)
RegistroCreado 20/12/2017 — Expires 20/12/2026
Estado HTTP301 Moved Permanently
Detalles técnicosDNS, nombres TLS y marcas de tiempo
Primera detección27/07/2026
DOM Analysisanalyzed 27/07/2026DOM analysis score 78/100
Submitted URLhttps://blr5.vip/
Servidores de nombresns1.zndns.comns2.zndns.comns3.zndns.comns4.zndns.comvip1.zndns.comvip2.zndns.comvip3.zndns.comvip4.zndns.com
Huella TLS
Observación TLSválido desde 13/06/2026analizado el 27/07/2026
Nombres alternativos del sujeto TLSwww.blr5.vip
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
La acreditación es un contrato, no un sello de seguridad.
Verificar las tasas de ICANN
Leer el RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Tecnologías
4 tecnologías identificadas con alta confianza
Bootstrap
Swiper
Moment.js
jQuery
Cloudflare Radar
Denunciar este dominio
Envía pruebas y ayuda a proteger a los demás
Análisis de VirusTotal
6 / Los proveedores de seguridad de 91 marcaron este dominio
View on VT
Last analyzed First positive detection Previous stored snapshot: 7 detections
alphaMountain.ai
CRDF
Forcepoint ThreatSeeker
Gridinsoft
PhishFort
SOCRadar
Infraestructura e informes relacionados
Mismo registrador: GoDaddy 6
Google impersonation 8
These domains also target Google users. View all Google threats →
Informes de amenazas recientes 6
Informes agregados recientemente de la base de datos PhishDestroy. Estos enlaces de descubrimiento no implican infraestructura ni propiedad compartida.
¿Te ha afectado esta página web?
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Action Fraud
Denunciar fraudes y delitos cibernéticos en Inglaterra, Gales e Irlanda del Norte
Contact centre0300 123 2040
PhishDestroy listing review No es un informe policial
Recurso sobre el dominio
Solicite una revisión si es propietario de este dominio y cree que el listado es incorrecto
¡Cuidado con los estafadores que se hacen pasar por empresas de recuperación de datos! Los delincuentes pueden volver a contactar a las víctimas haciéndose pasar por investigadores, abogados o agentes de recuperación. No pague tarifas por adelantado ni comparta credenciales. Más información sobre el fraude en las ayudas de recuperación →
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
directorio de 97 países
Borrador asistido por IA: el proveedor de IA procesa los detalles del incidente
Revíselo y envíelo usted mismo
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.
