MALICIOUS — CRITICAL
virentra.com: Confirmed Phishing Site
virentra[.]
virentra.com was observed serving HTTP responses with status code 200 on 2026-07-12.
- VirusTotal
- 3/91
- Blocklists
- No stored match
- sẵn có
- Che giấu · có thể truy cập · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
virentra.com — Che giấu · có thể truy cập (HTTP 200). Tóm tắt bằng chứng: VirusTotal 3/91; cloaking observed; PhishDestroy score 91/100. Nhà đăng ký: Fewmoretaps OU d/b/a T….
Phân tích chi tiết của PhishDestroy AI bên dưới được giữ bằng tiếng Anh để bảo toàn hồ sơ pháp chứng gốc.
Evidence Analysis
virentra.com was observed serving HTTP responses with status code 200 on 2026-07-12. The site is flagged as a generic phishing operation targeting credential harvest. The domain was registered on 2026-04-28 through Fewmoretaps OU d/b/a Trustname.com. No evidence of legitimate business activity has been identified, and the rapid appearance of the site aligns with typical phishing deployment timelines. Infrastructure analysis shows the domain resolves to IP address 104.21.6.233, which is hosted by Cloudflare, Inc. The IP is geolocated to Canada. DNS resolution is provided by the Cloudflare nameservers neil.ns.cloudflare.com and venus.ns.cloudflare.com. The TLS certificate presented is issued by Google Trust Services under the WE1 root, indicating the use of a publicly trusted certificate chain. The domain appears on a single security blocklist and is actively blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent. AlienVault OTX references the domain in one threat‑intel pulse, corroborating its association with phishing campaigns. VirusTotal currently reports 0 detections across 95 scanners, but this lack of detection is consistent with recent, low‑profile deployments that have not yet been widely shared with scanning engines. Given the confirmed phishing classification and the observed infrastructure, defenders should add virentra.com and its resolving IP 104.21.6.233 to network‑level deny lists, enforce URL filtering, and monitor DNS queries for the associated Cloudflare nameservers. Continuous re‑scanning on VirusTotal and periodic checks of blocklist feeds are recommended to capture any future detections. Incident response teams should also consider sinkholing the domain to disrupt credential harvesting and collect additional telemetry.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Phạm vi dữ liệu12 recorded checks
Tình báo an ninh mạng Registrar context
Pipeline ứng phó với các mối đe dọa
Trạng thái trong danh sách chặn công khai
Thông tin về tên miền
Chi tiết kỹ thuậtDNS, SAN trong SSL, dấu thời gian
ICANN OVERSIGHT
Bối cảnh công nhận và RAA
Bối cảnh công nhận và RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Phân tích của VirusTotal
Bằng chứng và các báo cáo bên ngoàiIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Nếu bạn đã nhập thông tin xác thực tài khoản, thông tin cá nhân hoặc thông tin thanh toán hoặc đã tải xuống tệp từ miền này, hãy hành động ngay lập tức. Dưới đây là các nguồn lực giúp bạn báo cáo vụ việc và bảo vệ chính mình.
Hãy báo cáo với chính quyền địa phương
Chọn quốc gia của bạn để nhận liên hệ tội phạm mạng chính thức hoặc soạn thảo đơn khiếu nại →.