vnukeltar-es[.]com

This domain, vnukeltar-es.com, poses as a legitimate cryptocurrency and stock market analysis platform but operates as a high-risk investment scam. The site targets users with promises of AI-driven financial insights, likely to harvest credentials, payment details, or cryptocurrency wallet information. The fraudulent nature is reinforced by its page title, 'Vnukeltar – Análisis impulsado por IA para los mercados de criptomonedas y acciones,' which mimics professional financial advisory services to deceive victims. Analysis indicates this domain is malicious based on multiple technical indicators. It is flagged by 15 out of 95 security vendors on VirusTotal, including detections for social engineering by Google Safe Browsing. The domain was registered on May 29, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu, an unusual future date suggesting potential domain spoofing or registry manipulation. Additionally, it appears on four security blocklists and resolves to IP address 172.67.219.112, hosted behind Cloudflare’s infrastructure. The site uses a Let’s Encrypt SSL certificate, HSTS, and Google Analytics, which are common in legitimate sites but frequently abused in phishing operations to appear trustworthy. If you visited vnukeltar-es.com, take immediate action to mitigate risk. Disconnect the device from the network to prevent potential data exfiltration. Scan the system with updated security tools to detect malware or unauthorized access. Reset credentials for any accounts accessed during the visit, particularly financial, email, or cryptocurrency platforms. Monitor bank and crypto wallet transactions for unauthorized activity. Report the domain to local cybersecurity authorities or platforms like the Anti-Phishing Working Group (APWG) to aid in takedown efforts. Avoid interacting with any communications or links associated with this domain, as they may lead to further compromise.