vaultofin[.]com

The domain vaultofin.com has been identified as a credential theft phishing site impersonating Vaulto Bank. As of the latest assessment, the domain is currently offline. This domain was designed to trick users into revealing their personal and financial information, which could be used for malicious purposes such as identity theft and financial fraud.

Infrastructure analysis reveals that vaultofin.com was registered through Fewmoretaps OU d/b/a Trustname.com and resolves to the IP address 188.114.97.3. The domain was created on April 28, 2026, and has been flagged by 2 out of 95 security vendors on VirusTotal. Additionally, the domain appears on 1 security blocklist and has a Gridinsoft trust score of 0/100, indicating a severe lack of trustworthiness. The SSL certificate for the domain is issued by Google Trust Services, which may have been used to lend a false sense of security to potential victims.

Although the domain is currently offline, it remains important for organizations and individuals to remain vigilant. Security teams are advised to update their threat intelligence databases and ensure that all endpoints are configured to block this domain. Users should be educated on the importance of verifying the authenticity of bank URLs and should report any suspicious activity to their financial institution immediately. Regularly monitoring accounts for unauthorized transactions and enabling multi-factor authentication can further mitigate the risk of credential theft.