tornubet[.]com

PhishDestroy identifies tornubet.com as an active credential theft page designed to trick users into submitting login credentials. This domain masquerades as a legitimate service, luring visitors into revealing usernames and passwords under false pretenses. Once stolen, these credentials are typically used for account takeovers or sold on underground markets, posing a direct risk to personal and financial security. Users are strongly advised to avoid interacting with this domain entirely. This domain was flagged with 0 detections out of 95 VirusTotal scans as of the latest analysis. Investigations show tornubet.com was registered on October 07, 2025, through NameSilo, LLC, and currently resolves to IP address 172.67.195.119. While it possesses a Google Trust Services SSL certificate, this alone does not guarantee legitimacy. The combination of recent creation, hosting infrastructure, and zero detections underscores the importance of caution when encountering unfamiliar domains. If you visited tornubet.com, immediately change passwords on any accounts where you may have used the same credentials. Enable two-factor authentication wherever possible and scan your devices for malware. Do not enter any personal or financial information on this site. Report suspicious activity to your IT team or platform provider and consider running a reputable security scan. For future reference, verify website authenticity through official channels before submitting sensitive data.