vuejex[.]com

PhishDestroy identifies vuejex.com as a currently active phishing site specifically designed to mimic the official Vue.js framework website (vuejs.org) for the purpose of distributing malicious binaries. Threat actors registered this domain on April 11, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and equipped it with a Let’s Encrypt SSL certificate to enhance its appearance of legitimacy. The infrastructure resolves to IP address 104.21.33.76, which is already linked to previous malicious campaigns.

This domain has been flagged by 2 out of 95 VirusTotal security vendors, placing it under elevated risk classification. The low blocklist count suggests this threat is relatively new or highly targeted, enabling the domain to evade detection by several scanning engines. The combination of recent registration, clean SSL certificate, and limited visibility on public blocklists makes this domain particularly dangerous to developers seeking legitimate Vue.js resources online.

Users who have visited vuejex.com or downloaded files from this site should immediately isolate the affected system and scan for trojanized binaries. Security teams are advised to block the domain at the network perimeter and monitor endpoints for anomalous process behavior. If infection is suspected, reset credentials stored in browsers on the compromised host and initiate an incident response investigation. Report any observed artifacts to your threat intelligence platform for correlation with emerging malware families targeting JavaScript ecosystems.