qr-apps-l[.]ink
“Account Suspended”
qr-apps-l.ink — Conteúdo indisponível (HTTP 502). Tipo de golpe: Account Takeover. Resumo das evidências: VirusTotal 18/95 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, Bfore.Ai PreCrime, BitDefender); 3 external blocklist matches (Polkadot, Enkrypt, Codeesura); PhishDestroy score 95/100. Registrador: NameSilo.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain, qr-apps-l.ink, is identified as a high-risk generic phishing site, specifically designed to mimic legitimate login pages to steal user credentials. The domain's infrastructure and behavior align with common tactics used by cybercriminals to trick users into disclosing sensitive information, such as usernames, passwords, and personal data.
Analysis indicates that qr-apps-l.ink has been flagged by 18 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among the cybersecurity community. The domain was registered through NameSilo, LLC on July 13, 2025, and resolves to an IP address located in the Netherlands (38.45.18.201) under the AS174 Cogent Communications, LLC. Additionally, the domain appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, further corroborating its malicious intent. Notably, the domain does not have an SSL certificate, which is a red flag as legitimate sites typically use HTTPS to secure user data.
Users who have visited qr-apps-l.ink are advised to immediately change their passwords for any accounts they may have logged into on this site. They should also monitor their accounts for any unauthorized activity and consider enabling two-factor authentication (2FA) for added security. If any personal or financial information was entered, users should contact their financial institutions and credit monitoring services to report the potential breach and take necessary precautions to protect their identity and financial assets.
Inteligência de segurança de rede Registrar context
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo