shorta[.]vip
“Smart & Secure URL Shortener - Lyzo.io”
Ringkasan bukti
PhishDestroy has identified shorta.vip as an elevated-risk credential theft domain, designed to trick users into revealing their login credentials through a convincing but fraudulent login interface. This generic phishing campaign poses a significant threat to unsuspecting visitors who may mistake the site for a legitimate service.
The domain was created on May 13, 2026, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 172.67.155.40 and uses an SSL certificate issued by Google Trust Services (WE1). VirusTotal analysis shows 14 out of 95 security vendors flagging the domain as malicious. Additionally, shorta.vip appears in 2 threat intelligence pulses on AlienVault OTX and is listed on 1 security blocklist. The domain is currently offline, which limits immediate risk but does not eliminate the possibility of reactivation.
To protect against credential theft, users should never enter passwords or sensitive information on untrusted sites. Always verify the URL before logging in, enable two-factor authentication where possible, and use a password manager to detect lookalike domains. If credentials were entered on shorta.vip, change passwords immediately and monitor accounts for suspicious activity.
Data Coverage
Sinyal Keamanan
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | xyfvvfyy.elementor.cloud |
malicious | Sinkholed |
| OpenDNS | xyfvvfyy.elementor.cloud |
phishing | Phishing Block |
| Quad9 DNS | xyfvvfyy.elementor.cloud |
malicious | Sinkholed |
| OpenDNS | shorta.vip |
phishing | Phishing Block |
| DNS4EU | shorta.vip |
malicious | Sinkholed |
| Hagezi Threat Feed | shorta.vip |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive