vicareu[.]su

PhishDestroy first observed vicareu.su on Jun 14, 2026. Current evidence score: 100/100 (critical).

Positive findings are stored from 5 sources: VirusTotal, MetaMask, CryptoFirewall, SEAL, and Spamhaus DBL. VirusTotal recorded 18 detections among 94 engines: ADMINUSLabs, alphaMountain.ai, ArcSight Threat Intelligence, BitDefender, Certego, CyRadar, Dr.Web, ESET, ESTsecurity, Forcepoint ThreatSeeker, Fortinet, G-Data, Kaspersky, Lionic, Seclookup, SOCRadar, Sophos, Webroot on Jul 18, 2026 at 20:45 UTC. MetaMask, CryptoFirewall, and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 8, 2026 at 10:20 UTC. Spamhaus DBL: DBL_BOTNET on Jul 13, 2026 at 18:37 UTC. Non-positive and contextual checks: AlienVault OTX listed 22 community pulse references (not vendor detections) on Apr 11, 2026 at 11:10 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Apr 12, 2026 at 05:00 UTC.

An access-restricted HTTP 403 response was recorded on Aug 8, 2026 at 10:15 UTC. The recorded creation date for the domain is Apr 11, 2026. At collection time, the hostname resolved to 37.77.150.150 on AS198953 (Proton66 OOO). The recorded endpoint location is St Petersburg, RU. The stored server header is nginx/1.24.0 (Ubuntu).

Neither a page title nor a landing-page capture is stored. The record contains 5 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.