v1[.]velcuri[.]io

The domain v1.velcuri.io is currently identified as a high-risk brand impersonation threat, actively impersonating the brand Orca. As of now, the domain remains operational and poses a significant risk to users. The page title associated with this domain misleadingly indicates 'ROJADIRECTA TV - Live Sports Streaming | Watch Football Live', which can further obfuscate its malicious intent.

According to the collected data, v1.velcuri.io was created on February 23, 2026, and registered through Spaceship, Inc. It resolves to the IP address 104.21.42.166, located in the United States under AS13335, managed by Cloudflare, Inc. Notably, the domain is flagged by 1 out of 95 security vendors on VirusTotal, suggesting some level of detection in the cybersecurity community. Furthermore, it appears on two security blocklists, specifically blocked by PhishDestroy and ScamSniffer, indicating a recognized threat level by these entities. The SSL certificate used is issued by Google Trust Services / WE1, which might lend it unwarranted legitimacy in the eyes of unsuspecting users.

Given the active status of this domain, it is crucial to implement immediate countermeasures. Network administrators are advised to update their security appliances to block access to IP 104.21.42.166 and add v1.velcuri.io to their internal blocklists. Users should be educated about the risks of brand impersonation and encouraged to verify domain authenticity before engaging with web content. Continuous monitoring of domain activity and further collaboration with threat intelligence providers will be essential in mitigating the risks posed by this domain.