MALICIOUS — CRITICAL
Verifica phishing e sicurezza per vortexteam.live
vortexteam[.]
PhishDestroy identifies vortexteam.live as an active crypto drainer phishing domain under investigation for fraudulent cryptocurrency theft.
- VirusTotal
- 5/91
- Blocklists
- No stored match
- Disponibilità
- Ultimo attivo conosciuto · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@nicenic.net, abuse@identitydigital.com.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
vortexteam.live — Ultimo attivo conosciuto (HTTP 200). Tipo di truffa: Crypto Drainer. Riepilogo delle prove: VirusTotal 5/91 (alphaMountain.ai, CRDF, Fortinet, Gridinsoft, SOCRadar); Spamhaus DBL_SPAM; PhishDestroy score 80/100. Registrar: NiceNIC.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
PhishDestroy identifies vortexteam.live as an active crypto drainer phishing domain under investigation for fraudulent cryptocurrency theft. This domain resolves to IP 45.147.197.100 and uses a Let's Encrypt SSL certificate to appear legitimate. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 27, 2026, it currently shows 1/95 detections on VirusTotal, indicating evasion of mainstream antivirus engines. Security researchers note its status as a generic phishing threat with potential for widespread exploitation due to low initial detection rates. This domain exhibits characteristics of a crypto drainer phishing operation designed to steal cryptocurrency assets from unsuspecting users. The combination of recent domain creation, low VirusTotal detection rate (1/95), and use of a legitimate SSL certificate suggests an advanced evasion strategy. While specific impersonation targets remain unverified, the domain's generic phishing classification and active status warrant immediate caution. The registrar's reputation and recent domain age further contribute to its high-risk profile for financial fraud. Users who visited vortexteam.live should immediately check their cryptocurrency wallets for unauthorized transactions and revoke any connected wallet permissions. Do not interact with this domain or any associated links, and report suspicious activity to PhishDestroy for further investigation. Consider using hardware wallets for cryptocurrency storage and enabling transaction alerts to detect fraudulent transfers promptly. Always verify domains through PhishDestroy's database before entering any sensitive information or making financial transactions.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete Registrar context
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 02:45:28 UTC
Tecnologie · 3 identified
JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com Confidenza al 100%DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.
ddos-guard.net Confidenza al 100%Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of vortexteam.live · checked May 1, 2026
Dati e relazioni esterneIndependent lookups and source reports
PD-20260501-092DF1 Recipient: abuse@nicenic.net, abuse@identitydigital.com Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.