v2-anydesk[.]com

PhishDestroy identifies v2-anydesk.com as a generic phishing domain that impersonates the legitimate remote desktop software AnyDesk. The domain is currently offline, but during its active period, it mimicked the AnyDesk download page to trick users into entering credentials or downloading malicious software. This threat poses a risk of credential theft or malware infection.

Analysis reveals that the domain was flagged by 2 of 95 VirusTotal vendors, indicating low detection coverage. It resolves to IP address 104.21.89.176 and uses an SSL certificate issued by Google Trust Services under the WE1 organization. The domain was registered through NiceNIC International Group Co., Limited on February 21, 2026. It appears on one security blocklist and has a VirusTotal trust score showing 2 malicious flags. The page title was “AnyDesk - Download,” further confirming its impersonation of the brand.

Since the domain is now offline, the immediate risk is reduced. However, users who may have visited v2-anydesk.com during its active period should change any passwords entered and scan their devices for malware. PhishDestroy recommends always verifying the authenticity of software download sites by checking the official domain (e.g., anydesk.com) and using security tools to scan suspicious links before interaction.