vvay.lol favicon

vvay.lol

Category: Phishing

Scanned: Aug 16, 2026, 10:00 PM UTC · First seen: Aug 16, 2026 · Threat Engines: 0 / 91 · Times Scanned: 2
34 / 100 Trust Score Based on scan findings at the time of analysis
Potentially Suspicious
0 - High Risk50 - Moderate100 - No Threats
Fresh scan recommended
Last scanned 7 days ago - security status may have changed since then.
Not scanned has not been scanned yet. Hit Scan Now to check it.

Scans can take up to 5 minutes to complete. Please keep this tab open - we'll redirect you to the report when it's ready.

Failed
Scan unavailable
Scan failed
Protect yourself from potentially harmful websites
Combo Cleaner's real-time web protection module actively blocks access to scam, phishing & malware-infected websites.
★★★★★ 4.8 / 5 Recommended by PCrisk.com editors Windows · Mac · Android · iOS
Download Combo Cleaner Free scan · no signup

To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.

Screenshot of vvay.lol Captured Aug 16, 2026
https://vvay.lol
Screenshot of vvay.lol
This website has been flagged as potentially harmful
Screenshot blurred for safety. Multiple security engines flagged potential threats at the time of scanning.
3 months
Moderately Popular - #218,055 Tranco rank (100K-1M monthly visitors)
Not listed (91 checked)
✓ Valid (TLS)
DigitalOcean, LLC
Singapore, Singapore
cloudflare envoy
Unknown
167.172.81.31
Domain & WHOIS Information
Registrar Dynadot Inc
Registered May 20, 2026
Expires May 20, 2027
Name Servers ns1.dyna-ns.net
DNSSEC Unsigned
Hosting DigitalOcean, LLC
Reputation & Threat Check 91 security engines checked
File Scan Summary Powered by Quttera Engine
27 files scanned
No threats
24
Low Risk
0
Medium Risk
3
High Risk
0
No threats Low Risk Medium Risk High Risk
twitter.com/data%3Aimage/gif;base64%2CR0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw== 3.6 KB Flagged: medium risk
twitter.com/en/data%3Aimage/gif;base64%2CR0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw== 3.6 KB Flagged: medium risk
twitter.com/i/jfapi/onboarding/web/landing 3.6 KB Flagged: medium risk
twitter.com.http-redirect 74 B No threats
platform.twitter.com/widgets.js 91.8 KB No threats
twitter.com/manifest.json 1.9 KB No threats
twitter.com/os-grok.xml 475 B No threats
twitter.com/os-x.xml 470 B No threats
twitter.com/privacy 149.3 KB No threats
twitter.com/tos 163.7 KB No threats
twitter.com/# 206.9 KB No threats
abs.twimg.com/errors/404-8651f633fd193e0b546010676a4fac06.js 31.5 KB No threats
twitter.com/en/privacy#overlay-chapter2.6.1 149.3 KB No threats
Show 14 more...
Quttera flagged medium risk files - is this your website?
Investigate and remove potential threats with Quttera
Remove Malware

Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.

External Links & Domains
791
External Links
1 Flagged
1
Iframes
Clean
39
Referenced Domains
1 Flagged
2
Flagged Resources
Detected
status.twitterstat.usFlagged: Generic Suspicious Object
https://status.twitterstat.us/Flagged: Generic Suspicious Object
https://status.twitterstat.us/Flagged: Generic Suspicious Object
http://vvay.lol/data:image/gif%3Bbase64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw%3D%3DNot flagged
http://vvay.lol/i/flow/loginNot flagged
http://vvay.lol/i/flow/signupNot flagged
http://vvay.lol/i/jfapi/onboarding/web/landingNot flagged
http://vvay.lol/manifest.jsonNot flagged
http://vvay.lol/os-grok.xmlNot flagged
http://vvay.lol/os-x.xmlNot flagged
http://vvay.lol/settings/your_twitter_data/accountNot flagged
http://vvay.lol/settings/your_twitter_data/adsNot flagged
http://vvay.lol/settings/your_twitter_data/audiencesNot flagged
http://vvay.lol/settings/your_twitter_data/devicesNot flagged
http://vvay.lol/settings/your_twitter_data/partner_interestsNot flagged
http://vvay.lol/settings/your_twitter_data/request_dataNot flagged
https://about.twitter.comNot flagged
Show 485 more...
Showing first 500 of 791 entries.
status.twitterstat.usFlagged: Generic Suspicious Object
about.twitter.comNot flagged
about.x.comNot flagged
abs.twimg.comNot flagged
ads.x.comNot flagged
blog.x.comNot flagged
business.twitter.comNot flagged
business.x.comNot flagged
careers.twitter.comNot flagged
careers.x.comNot flagged
commission.europa.euNot flagged
create.x.comNot flagged
developer.twitter.comNot flagged
developer.x.comNot flagged
docs.x.comNot flagged
Show 24 more...
<iframe name%3D"'+t.name+'">Not flagged
vvay.lol Overview

Description of vvay.lol

The domain vvay.lol currently appears to present a login page styled to resemble X, the social media platform formerly known as Twitter. The page title, meta description, large X logo, and navigation references to x.com and twitter.com suggest that the site is attempting to mirror the branding and user flow of that service rather than operate as an independent website.

Based on the visible content, this page appears focused on account sign-in and onboarding rather than original publishing, commerce, or informational services. The domain itself does not match the official X/Twitter brand domains, and the site is hosted on general cloud infrastructure rather than clearly identifying itself as an official corporate property.

Safety Assessment for vvay.lol

At the time of this scan, no threats were detected by 0 out of 91 security engines, and the major malware/phishing blacklist databases included in the scan were reported as clean. However, the domain is very new at 88 days old, and the page closely resembles the official X/Twitter login experience while using an unrelated domain name. That kind of visual and functional resemblance may indicate a look-alike site intended to capture user credentials or impersonate a known platform.

A secondary malware scan labeled the site as suspicious and flagged a small number of resources and one referenced domain with a generic heuristic verdict. On its own, that type of heuristic finding is relatively low confidence, but in this case it adds to the concern created by the branding resemblance and login-focused design. The absence of multi-engine detections does not fully rule out risk, especially for newer domains that may not yet have broad reputation coverage.

Based on these findings, this website may pose potential risks to visitors.

Technical Description

The site uses a valid Let's Encrypt SSL certificate that was active at the time of scanning, which indicates that traffic can be encrypted in transit. It appears to be served through Cloudflare-related infrastructure, with hosting on DigitalOcean and an observed server IP geolocated to Singapore. The domain uses Dynadot nameservers.

From a configuration standpoint, DNSSEC is not enabled, and the domain is relatively new. No blacklist hits were reported in the checked threat databases or DNS-based reputation checks at the time of the scan, but the combination of a fresh registration and a branded login page on a non-official domain may warrant additional caution.

HTTP Redirect Chain
302 https://vvay.lol/
301 https://twitter.com/
200 https://x.com/
Website Insights
#218,055
Tranco Rank
Moderately Popular
Visitors ~100K-1M/mo
Category: Phishing
Rank History (30 days)
Jul 14 Aug 15
13 cookies detected
Essential8
Analytics0
Advertising0
Social5
0 1st party cookies
13 3rd party (trackers)
Dispute This Score For website owners
Believe this score is inaccurate?
If you are the website owner and believe the scan results contain errors or false positives, you can submit a dispute for manual review. Our team typically responds within 1-2 business days.
You will be asked to verify your email before the dispute can be processed.
By submitting this form, you confirm that the information provided is accurate. Disputes are reviewed manually and results may take up to 48 hours to update.
One more step…
To submit your dispute for vvay.lol, please click the verification link we just emailed you. Once verified, we'll review it within 1-2 business days.
This report was generated automatically and is provided for informational purposes only. Results are based on a point-in-time scan and may contain false positives or incomplete data. This does not constitute a security audit or certification. No vendor in the market can guarantee a 100% detection rate. If you believe this report is inaccurate, please submit a dispute.

Share your experience with this website. Was it safe? Did you encounter any issues?