vr.de-login.app
Category: Phishing
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of vr.de-login.app
The domain vr.de-login.app appears to be a very recently registered website using a subdomain-style naming pattern that resembles a login portal. Based on the domain structure alone, it may be attempting to present itself as an authentication or account-access page, potentially related to a German-language service or financial login workflow. The site is not ranked in major traffic measurements provided here, which suggests it may have limited visibility or very recent deployment.
The available scan context does not show a broad content footprint or a developed public-facing website. The observed resources are mainly infrastructure-related files and challenge pages associated with traffic filtering and error handling, rather than normal business or informational content. Based on the domain name and the phishing-oriented detections in the scan data, this website appears more consistent with a login-themed page than with a conventional consumer, media, or corporate website.
Safety Assessment for vr.de-login.app
Several security engines flagged this domain at the time of the scan, with 8 out of 92 detections identifying it as phishing or malicious. That level of multi-engine agreement is a meaningful warning sign, especially when combined with the domain's very recent registration age of only 20 days and the absence of an established traffic ranking. Although malware scanning of the fetched files did not detect malicious payloads, phishing pages often rely on deceptive forms and branding rather than downloadable malware, so a clean file scan does not remove the concern.
Blacklist and threat-database checks were clean at the time of this scan, and no DNS-based mail-reputation listings were reported. However, the domain name closely resembles a login-related address and may be designed to imitate a legitimate sign-in experience. The combination of a newly created domain, login-themed naming, and multiple phishing detections raises the overall risk profile. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate that was active at the time of the scan, and it is served through Cloudflare infrastructure with nameservers also delegated to Cloudflare. The resolved server IP was 188.114.97.2, geolocated here to Toronto, Canada. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional authenticity layer.
From a security posture perspective, the main concern is not the TLS setup but the reputation and behavioral signals around the domain. The observed linked resources include Cloudflare challenge and error-handling assets, which may indicate the site is behind protective filtering or anti-bot controls. No flagged files, malicious external links, or iframe-based threats were identified in the provided scan snapshot.
Share your experience with this website. Was it safe? Did you encounter any issues?