info-vr-team[.]de

On July 25, 2026, an investigation into the domain info-vr-team.de revealed it to be associated with a generic phishing threat, posing an elevated risk level. Analysis indicates that this domain has been flagged by 20 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion from the security community. The domain is registered through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3, which is located in the United States under the Autonomous System Number (ASN) AS13335, belonging to Cloudflare, Inc. The SSL certificate for the domain is issued to PhishDestroy and botadmin.destroy.tools, which are known entities in the phishing landscape. The HTTP status code for the domain is 200, indicating that the server responded successfully, although the exact content of the page, titled 'Index of /', is not yet analyzed.

The domain was created on November 21, 2025, and has been included in 16 threat intelligence pulses on AlienVault OTX, further corroborating its association with malicious activity. The domain also appears on one security blocklist, and it is currently blocked by PhishDestroy. Gridinsoft has assigned a trust score of 0/100 to this domain, reflecting a high level of distrust.

The current status of the domain is offline, which may indicate that it has been taken down by security measures or the threat actor. Defenders should remain vigilant and ensure that the domain remains blocked in their network security configurations to prevent potential infections. Additionally, monitoring for any resurgence of this domain or similar infrastructure is advisable.