silentium-vpn[.]com

The domain silentium-vpn.com is currently under investigation by PhishDestroy, flagged as a credential theft attempt impersonating the Stack Overflow brand. While the domain has been taken offline, the investigation reveals a sophisticated phishing setup designed to trick users into entering their login credentials on a fake Stack Overflow page.

Technical analysis shows the domain resolves to IP address 94.156.237.77 and was registered through Fewmoretaps OU d/b/a Trustname.com on April 16, 2026. The SSL certificate was issued by Let's Encrypt (E7), lending an air of legitimacy. VirusTotal reports 0 out of 95 detections, meaning no security vendors flagged the domain as malicious during scanning. However, it appears on 1 security blocklist and was found in 1 AlienVault OTX threat intelligence pulse, indicating it was already being tracked by security researchers. The page title displayed 'Newest Questions - Stack Overflow', confirming the brand impersonation vector.

Given the credential theft nature of this threat, users who may have interacted with silentium-vpn.com should immediately change any passwords entered on the site and enable two-factor authentication on their Stack Overflow accounts. The domain is now offline, but similar domains may appear. PhishDestroy recommends vigilance against unsolicited login prompts and verification of URLs before entering credentials. For organizations, blocking the IP 94.156.237.77 and monitoring for related domains is advised.