vzlomvk[.]site

On July 24, 2026, the domain vzlomvk.site was identified as hosting a phishing page that advertises rapid and confidential access to VKontakte accounts, as reflected in the page title "Доступ к аккаунтам быстро и конфиденциально. Взлом ВК". The domain is registered through Hostinger Operations, UAB and was created on February 21, 2026. DNS resolution points to the IPv6 address 2a02:4780:3f:1914:0:784:c848:5, which maps to the German location of AS47583 Hostinger International Limited. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com.

Mail exchange records list mx1.hostinger.com with priority 5 and mx2.hostinger.com with priority 10, indicating use of Hostinger’s email infrastructure. The site served an HTTP 200 response and presented an SSL certificate issued by Let’s Encrypt (R12), confirming the presence of TLS with HSTS enforcement. Technology fingerprints include Bootstrap, Nginx, Yandex.Metrika, and Tiny Slider, consistent with a typical low‑cost phishing kit. Reputation checks show a Gridinsoft trust score of 0 out of 100 and the domain appears on one security blocklist.

It is actively blocked by PhishDestroy and three of ninety‑three security vendors on VirusTotal flagged the domain as malicious. Current operational status is offline, but the historical evidence suggests the infrastructure was used to lure VKontakte users into credential harvesting. Defenders should continue to block the domain at perimeter filters, monitor for any re‑registration of the same name or similar DNS patterns, and enforce credential‑reset policies for affected users. Additional scrutiny of traffic to the associated IPv6 address and the Hostinger hosting environment is advised to detect potential reuse of the underlying server for future campaigns.