royal-security-hub-profile-privacy-questions-upgrade[.]vograc[.]com

This domain, royal-security-hub-profile-privacy-questions-upgrade.vograc.com, is actively engaged in brand impersonation phishing targeting users with fake account upgrade prompts. The infrastructure mimics legitimate security verification processes, tricking victims into entering credentials or sensitive information under the guise of mandatory profile updates or privacy compliance checks. Analysis indicates the campaign employs social engineering tactics, including urgency cues and official-looking interfaces, to lower user vigilance and increase submission rates. Infrastructure analysis reveals the domain was registered on August 17, 2021, through 10DENCEHISPAHARD, S.L, a registrar frequently associated with malicious registrations. As of the latest scan, 5 out of 95 security vendors on VirusTotal have flagged the domain as malicious, with detections primarily categorized under phishing or fraudulent content. The domain resolves to the IP address 75.102.58.24 and utilizes a Let's Encrypt SSL certificate, which, while providing encryption, does not validate the legitimacy of the underlying content. No additional blocklist data is currently available, but the domain remains active and unremediated. Users who have visited royal-security-hub-profile-privacy-questions-upgrade.vograc.com or entered credentials on the site should immediately revoke access to any linked accounts and change passwords using a secure, unrelated device. Enable multi-factor authentication (MFA) on all critical accounts, particularly those related to financial services or email. Monitor accounts for unauthorized activity, including logins, transactions, or configuration changes. If personal or financial data was submitted, consider placing a fraud alert with relevant credit bureaus and reporting the incident to local cybercrime authorities. Avoid interacting with any emails, links, or pop-ups associated with the domain, and verify the legitimacy of any future security prompts through official channels only.