vpnac[.]org

This domain, www.vpnac.org, was registered on 2026-03-29 through NameCheap, Inc. It resolves to Cloudflare IP 104.21.57.168, hosted in Canada, and uses Cloudflare’s DNS service (nelly.ns.cloudflare.com, sid.ns.cloudflare.com). The site presents the page title “VPN.AC - Secure, Fast, Reliable VPN Service,” indicating an attempt to masquerade as the legitimate VPN.AC service. The TLS certificate is issued by Google Trust Services under the WE1 authority, confirming HTTPS delivery. Detected technologies include PHP, HTTP/3, HSTS, Cloudflare Browser Insights, and the Cloudflare edge network. The domain currently returns an HTTP 301 redirect and is listed on a single security blocklist (PhishDestroy). Gridinsoft assigns a trust score of 0/100, and one of ninety‑four VirusTotal scanners has flagged the domain. Risk level is classified as high and the campaign remains active. While the infrastructure points to a typical phishing setup leveraging reputable CDN services, no additional payload or credential‑harvesting page has been observed. Defenders should block the domain at perimeter filters, monitor DNS queries for the associated IP and nameservers, and update web‑filtering rules to include the observed redirect behavior. Ongoing surveillance is recommended to capture any evolution of the malicious content.