v1-subway[.]fun

The domain v1-subway.fun poses a specific threat categorized as generic phishing. This type of threat typically involves deceiving users into divulging sensitive information such as passwords or credit card numbers by mimicking legitimate services. The domain's current status as offline reduces immediate risk, but historical data suggests it was actively used in phishing campaigns before being deactivated. Given its elevated risk level, users are advised to remain cautious.

Detailed analysis reveals that v1-subway.fun was flagged by 2 out of 95 security vendors on VirusTotal. It is registered through HOSTINGER operations, UAB and was created on April 27, 2026. The domain resolves to IP address 168.231.97.114. Notably, it is blocked by multiple security platforms, including MetaMask, PhishDestroy, and SEAL, and appears on three distinct security blocklists. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trustworthiness. Technologies identified on the domain include Vue.js, Apache HTTP Server, and jsDelivr, which may have been utilized to create a convincing facade for phishing attacks.

Users who visited v1-subway.fun should immediately assess their accounts for any unauthorized access or suspicious activity. It is crucial to change passwords and enable two-factor authentication where possible. Additionally, any received communications that appear to be from the domain should be treated with suspicion, and users should refrain from providing personal information or financial details. Monitoring credit reports and bank statements for unusual transactions is also recommended to safeguard against potential compromise.