CF Radar
provider verdict: malicious
Interpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
“Verificação de Conta”
Assessment based on the stored source evidence below. Review sources →
centralcreditovirtual.online — Conteúdo indisponível. Tipo de golpe: Credential Phishing. Resumo das evidências: VirusTotal 0/91; CF Radar malicious; cloaking observed; PhishDestroy score 83/100. Registrador: Dynadot.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
These are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.
provider verdict: malicious
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
5/14
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
checked — no detections recorded
DenunciarEngine detections from this stored analysis. Vendors and collection times may differ from other sources.
no community references
DenunciarCommunity publication references, not a vendor verdict or evidence of a common operator.
relatório armazenado
View stored capture ↗ DenunciarA preserved page image documents what the collector received; a capture is not a safety verdict.
Análise concluída
DenunciarThis is the recorded automated analysis. Completion alone is not a safety verdict.
Checked; no threat flag recorded
DenunciarA result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
0 external matches
DetalhesA result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Stored narrative · generated . Provider checks below retain their own observation dates.
This domain, centralcreditovirtual.online, is flagged as a credential harvesting phishing site targeting users in the financial sector. Analysis indicates the domain is designed to mimic legitimate credit services, tricking victims into submitting sensitive login credentials, personal identification details, or financial information. The threat actor likely employs social engineering tactics, such as fake login portals or fraudulent account verification prompts, to exploit user trust in financial institutions. Infrastructure analysis reveals the domain was registered on July 01, 2026, through Dynadot Inc, a registrar frequently utilized for short-lived phishing campaigns. As of the latest scan, the domain has 0 detections out of 95 security engines on VirusTotal, suggesting it has not yet been widely flagged or blocked. The domain resolves to the IP address 69.49.241.129, which may host additional malicious infrastructure. The SSL certificate, issued by Let's Encrypt, provides a false sense of security, as phishing sites commonly use valid certificates to appear legitimate. Users who have visited centralcreditovirtual.online or entered credentials on the site should immediately revoke any submitted information by contacting their financial institution. Reset passwords for all accounts where the same credentials may have been reused, and enable multi-factor authentication where available. Monitor financial statements for unauthorized transactions and report any suspicious activity to relevant authorities. Security teams should block the domain and IP address at the network level and investigate logs for potential exposure within their environments.
What this report contains, where it came from, and when it was collected. A retained record can be incomplete; collection status is separate from the threat assessment.
These checks have no retained result. This does not mean they passed or that a scan is running.
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns1.dyna-ns.netns2.dyna-ns.netLocation describes the IP network.
Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of centralcreditovirtual.online · checked Jul 3, 2026
A página exibia uma resposta para um visitante que parecia um navegador e outra para um rastreador ou um verificador de segurança. O cloaking existe apenas para impedir que os avaliadores tenham acesso à página de destino real.
content_divergenceNota do digitalizador: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='centralcreditovirtual.online', port=80): Max retries exceeded with url: / (Caused by NewCo
11 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Template-based draft · optional AI wording assistance requires separate consent
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraEnvie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarRelatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMonitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo