launchertools[.]pro

On 23 July 2026, the domain launchertools.pro was observed to be offline. The site presented a page titled “Your domain is expired” and did not serve an SSL certificate. DNS resolution returned a single IPv4 address 84.32.84.33, which is allocated to AS47583 Hostinger International Limited and geolocated to Lithuania. The domain was registered on 18 July 2024 through Hostinger Operations, UAB, a known hosting provider. VirusTotal analysis recorded nine detections out of ninety‑five scanners, indicating that multiple security products have flagged the domain as malicious.

The domain is also listed on five public blocklists: PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. No additional infrastructure such as sub‑domains or alternative name servers was identified; the registrar data lists a single nameserver entry. The lack of an active HTTPS service suggests the operator may have removed the site after detection. While the page title and the generic phishing classification imply a credential‑harvesting campaign, the specific target or lure has not been disclosed in the available data. Consequently, the precise phishing kit or victim profile remains uncertain.

The threat is classified as generic phishing with an elevated risk rating. The offline status indicates the current campaign is not actively serving content, but the infrastructure remains allocated and could be reused. Defenders should add 84.32.84.33 to network‑level blocklists, enforce DNS filtering for launchertools.pro, and monitor for any re‑activation of the domain or related hostnames. Continuous monitoring of the registrar and hosting provider for new domains sharing the same IP is advised, and ongoing vigilance is recommended given the recent detection activity and the presence on multiple blocklists.