virtual-voti1ng[.]pages[.]dev
virtual-voti1ng.pages.dev 网络钓鱼与安全检查
“Create, co-own, interact with AI Agents | Virtuals Protocol”
virtual-voti1ng.pages.dev — 最后已知的活跃状态 (HTTP 200). 诈骗类型:Crypto Drainer. 证据摘要: VirusTotal 4/91 (alphaMountain.ai, Forcepoint ThreatSeeker, Gridinsoft, LevelBlue); URLQuery 2 alerts; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 89/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Evidence Analysis
The domain virtual-voti1ng.pages.dev is flagged as a high-risk threat due to its involvement in generic phishing activities, specifically identified as a crypto drainer. This type of threat typically aims to deceive users into providing sensitive information or direct access to their cryptocurrency wallets, leading to unauthorized transactions and potential financial loss. The site's page title suggests interaction with AI agents, which could be misleading and used to lure unsuspecting users into a false sense of security.
Technical analysis of virtual-voti1ng.pages.dev shows it is hosted in Canada under the infrastructure of Cloudflare, Inc. The domain was created on May 21, 2026, which is indicative of a strategy often used by malicious actors to pre-register domains. Of significant concern is the fact that the domain has been flagged by 2 out of 95 security vendors on VirusTotal, and it appears on 4 security blocklists. The SSL certificate issued by Google Trust Services may falsely reassure users of its legitimacy, despite its actual purpose.
For individuals who have visited virtual-voti1ng.pages.dev, it is crucial to take immediate action to protect personal and financial information. Users should ensure that no sensitive data, such as passwords or private keys, were entered on the site. It is recommended to update any potentially compromised passwords and to monitor financial accounts closely for unusual activity. Additionally, installing security software that can detect phishing attempts and block malicious websites will aid in preventing future occurrences.
数据覆盖范围12 recorded checks
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Nextron YARA rules | virtual-voti1ng.pages.dev/assets/secure.php?req=ping |
malware | PHP webshell obfuscated by encoding of mixed hex and dec |
| Nextron YARA rules | virtual-voti1ng.pages.dev/assets/secure.php?req=ping |
malware | Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different ver |
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of virtual-voti1ng.pages.dev · checked May 21, 2026
证据与外部报告Independent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。