vertulogic-de[.]net

Analysis of vertulogic-de.net, observed on July 24, 2026, indicates an elevated‑risk brand‑impersonation campaign targeting Binance users. The domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 188.114.97.3, which belongs to AS13335 (Cloudflare, Inc.) and is geographically located in the United States. No TLS certificate is presented; the site served HTTP without encryption, which is consistent with the lack of an SSL certificate in the intelligence feed. The authoritative nameservers are kobe.ns.cloudflare.com and serena.ns.cloudflare.com, both Cloudflare‑managed, confirming the hosting provider’s involvement.

The page title returned by the server is "VertuLogic™ - KI‑Trading Deutschland 2026," but no further content analysis is available, leaving the exact visual spoofing techniques unverified. Reputation metrics are poor: Gridinsoft assigns a trust score of 0 / 100, and the domain appears on three independent security blocklists. It has been actively blocked by PhishDestroy, MetaMask, and SEAL, suggesting that multiple anti‑phishing solutions have identified it as malicious. VirusTotal scans show nine of ninety‑five security vendors flagging the domain, reinforcing the suspicion of malicious intent.

The site’s current status is offline, limiting real‑time verification, but the combination of registrar data, hosting details, lack of TLS, low trust score, blocklist presence, and partial vendor detections provides sufficient evidence to classify the domain as a credential‑phishing vector. Defenders should continue to block the domain at network perimeter devices, update URL filtering lists with the identified IP and hostnames, and monitor for any re‑registration attempts.