vlrntscrok[.]cc
vlrntscrok.cc — Conteúdo indisponível (HTTP 502). Tipo de golpe: Credential Phishing. Resumo das evidências: VirusTotal 19/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 3 alerts; CF Radar malicious; PhishDestroy score 100/100. Registrador: Global Domain Group.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
This domain, vlrntscrok.cc, is flagged as a generic phishing threat specializing in cryptocurrency wallet credential harvesting. Analysis indicates the site employs deceptive loading pages to mimic legitimate wallet interfaces, tricking users into entering sensitive recovery phrases or private keys. No specific brand impersonation has been confirmed, but the infrastructure aligns with known crypto-drainer kits designed to siphon digital assets upon credential submission. The domain’s technical setup and rapid takedown response suggest a high-velocity phishing campaign targeting unsuspecting cryptocurrency users. Infrastructure analysis reveals concrete technical indicators associated with vlrntscrok.cc. The domain is registered through Global Domain Group LLC and was created on June 01, 2026, indicating a recently established malicious operation. It resolves to the IP address 91.227.114.14, a host with a history of supporting phishing infrastructure. VirusTotal reports 19 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The site employs HTTP/3, a protocol often exploited for its low latency and evasion capabilities in phishing attacks. Google Safe Browsing (GSB) has not yet listed the domain, but its presence on other blocklists underscores its elevated risk profile. Current status shows vlrntscrok.cc has been taken offline, likely due to rapid detection and reporting by security entities. Despite its offline status, residual risk remains for users who may have interacted with the domain during its active window. Affected individuals should immediately revoke access to any connected wallets, monitor for unauthorized transactions, and rotate credentials for associated accounts. Organizations are advised to block the domain, its resolving IP (91.227.114.14), and monitor for similar patterns in newly registered domains under the same registrar. Proactive threat hunting should focus on HTTP/3-based phishing campaigns, particularly those targeting cryptocurrency infrastructure.
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | vlrntscrok.cc |
malicious | Sinkholed |
| OpenDNS | vlrntscrok.cc |
phishing | Phishing Block |
| DigiCert UltraDNS | vlrntscrok.cc |
malicious | Sinkholed |
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Captura armazenada
Inteligência de Domínios
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
Tecnologias · 1 identified
HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of vlrntscrok.cc · checked Jun 26, 2026
Evidências e relatórios externos
PD-20260601-D351FA Recipient: abuse@globaldomaingroup.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo