MALICIOUS — HIGH
Análisis de phishing y seguridad de vektral.app
vektral[.]
The domain vektral.app was a generic phishing site posing as a decentralized finance (DeFi) platform, classified as a DeFi scam.
- VirusTotal
- 2/94
- Blocklists
- No stored match
- Disponibilidad
- Contenido no disponible · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
vektral.app — Contenido no disponible (HTTP 502). Suplantación de marca: Across; Tipo de estafa: Investment Scam. Resumen de las pruebas: VirusTotal 2/94 (Fortinet, SOCRadar); Spamhaus DBL_PHISH; PhishDestroy score 56/100. Registrador: NiceNIC.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Evidence Analysis
The domain vektral.app was a generic phishing site posing as a decentralized finance (DeFi) platform, classified as a DeFi scam. It did not impersonate a known brand or deploy a crypto drainer kit but presented itself under the fabricated identity 'VEKTRAL | Architecting the Decentralized Future'. As of the latest verification, vektral.app has been taken offline, though its prior activity targeted users with fraudulent investment schemes.
Technical indicators confirm vektral.app exhibited elevated risk characteristics. The domain was flagged by 2 of 95 VirusTotal security vendors and appeared on 1 security blocklist (PhishDestroy). Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 18, 2026, it resolved to the IP address 94.154.172.39, hosted by IP Vendetta Inc in Seychelles. The site used an SSL certificate issued by Let's Encrypt (E8) and ran on Apache HTTP Server, with nameservers ns5.offsh.nl and ns6.offsh.nl. Despite these red flags, Google Safe Browsing did not flag the domain, and its Gridinsoft trust score was 0/100.
Users who interacted with vektral.app should assume their credentials or wallet details may be compromised. For crypto-related exposure, revoke all token approvals and transfer funds to a new wallet. For credential phishing, change passwords immediately, enable two-factor authentication, and monitor accounts for unauthorized activity. Report the domain to PhishDestroy or other relevant security platforms to aid in takedown efforts and prevent further victimization.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Cobertura de los datos12 recorded checks
Inteligencia de seguridad de red Registrar context
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 04:29:23 UTC
Inteligencia forense
Tecnologías · 1 identified
Most widely used open-source HTTP server software.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of vektral.app · checked Mar 23, 2026
Datos y informes externosIndependent lookups and source reports
PD-20260324-DC1557 Recipient: abuse@nicenic.net, registrar-abuse@google.com, compliance@icann.org Victim safety and official reportingImmediate actions and verified reporting channels
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.