vinstoriainvrevo[.]live

This domain, vinstoriainvrevo.live, is identified as a confirmed phishing site targeting users through fraudulent AI-assisted trading platform claims. Analysis of the page title, 'Vinstoria Invrevo | Official Platform for AI Assisted Trading,' indicates an attempt to impersonate a legitimate investment service, likely aiming to harvest credentials or facilitate financial fraud. No specific drainer kit signatures were detected, but the infrastructure aligns with known investment scam campaigns observed in recent months. Technical indicators reveal multiple red flags: the domain was registered on May 25, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.223.124, which is part of a network infrastructure commonly leveraged for content delivery and obfuscation. VirusTotal detection metrics show 1 out of 95 security vendors flagging the domain, while Gridinsoft assigns a trust score of 0/100. The domain appears on a single security blocklist, specifically PhishDestroy, and employs SSL certification issued by Google Trust Services. Technologies detected include Cloudflare, Unpkg, jsDelivr, and jQuery, which are often exploited to enhance legitimacy or deliver malicious payloads. As of the latest assessment, vinstoriainvrevo.live has been taken offline, likely due to enforcement actions or infrastructure changes. However, the elevated risk level persists due to the domain's recent creation date, association with a high-risk registrar, and the use of obfuscation techniques. Users who interacted with this domain are advised to monitor financial accounts for unauthorized activity, reset credentials for any linked services, and report the incident to relevant fraud prevention authorities. Continuous vigilance is recommended, as threat actors may re-establish the campaign under a different domain or infrastructure.