VirusTotal
7 / 93
clear-vault.online — Contenu indisponible. Type d'arnaque : Investment Scam. Résumé des preuves: VirusTotal 7/93 (ADMINUSLabs, alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet); PhishDestroy score 71/100. Bureau d’enregistrement: Hostinger.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
7 / 93
checked — no detections recorded
Signalerno community references
Signalerprovider verdict: safe
Signalerrapport stocké
SignalerAnalyse terminée
Signaler14 vérifié — aucun blocage
Checked; no threat flag recorded
SignalerClear-vault.online is identified as a generic phishing domain, specifically a crypto drainer, and is currently offline. This domain does not appear to impersonate any specific brand. It was created on February 21, 2026, and has been flagged by 7 of 95 VirusTotal vendors, indicating a significant risk to users who may have interacted with it. The domain was registered through HOSTINGER operations, UAB, and is listed on 1 security blocklist, further highlighting its malicious nature.
The domain's registration and hosting details, including its IP address, are critical in understanding the scope of the threat. While the exact IP is not provided, the fact that it is flagged by a notable number of security vendors on VirusTotal suggests a high level of malicious activity. The creation date of February 21, 2026, indicates that this is a relatively new domain, likely set up with the intention of perpetrating phishing attacks. The registrar, HOSTINGER operations, UAB, is a legitimate service, but in this case, has been used for nefarious purposes. With a trust score that is likely to be very low due to its presence on a security blocklist, users are advised to exercise extreme caution.
Given its current offline status, it appears that efforts have been made to mitigate the threat posed by clear-vault.online. However, users who may have previously interacted with the domain should be vigilant and monitor their accounts for any suspicious activity. PhishDestroy recommends verifying the legitimacy of any website before entering sensitive information and keeping software up to date to protect against potential vulnerabilities. The fact that clear-vault.online was able to be flagged and taken offline demonstrates the importance of community reporting and the use of tools like VirusTotal in identifying and mitigating phishing threats.
Enregistrement des observations « crawler contre navigateur » pour cet hôte, ainsi qu'une vérification en temps réel des empreintes numériques pour les systèmes de répartition du trafic de type Keitaro.
Note relative à la numérisation: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='clear-vault.online', port=80): Max retries exceeded with url: / (Caused by NewConnectionEr
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
dns1.lytehosting.comclear-vault.onlinepriority 0Location describes the IP network.
Google PageSpeed Insights — mobile performance audit of clear-vault.online · checked Mar 2, 2026
10 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Template-based draft · optional AI wording assistance requires separate consent
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerRapports de phishing récents et changements de disponibilité observés
SurveillerSurveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif