vrugamb[.]gl

PhishDestroy identifies vrugamb.gl as an active cryptocurrency investment scam posing as a legitimate trading platform. This domain employs social engineering tactics to deceive users into depositing funds under false promises of high returns, with threat actors leveraging urgency and fabricated testimonials to pressure victims. The infrastructure supports phishing, fraudulent transactions, and potential malware distribution, making it a high-risk domain for financial exploitation.

This domain was flagged by 2 out of 95 security vendors on VirusTotal, indicating low but concerning detection rates. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 26, 2026, it resolves to IP 188.114.96.3 and utilizes a Let's Encrypt SSL certificate to appear legitimate. The recent creation date and minimal blocklist presence suggest this campaign is in early stages, with threat actors likely iterating to evade detection.

Users who visited vrugamb.gl should immediately cease any interaction, avoid entering personal or financial information, and scan their devices for malware. Block the domain and IP via firewall or hosts file, and report the site to your cybersecurity team or relevant authorities. If funds were transferred, contact your bank or cryptocurrency exchange provider to attempt recovery and monitor for follow-on attacks.