vinanex[.]com

Analysis of vinanex.com shows a domain that was created on July 22, 2024 and is currently taken offline. The site was blocked by PhishDestroy and appears on a single security blocklist, indicating that at least one external list has tagged the domain as malicious. Network attribution places the domain at IP address 91.108.101.246, which resolves to a host in France owned by Autonomous System 47583, registered to Hostinger International Limited. The registrar information confirms the domain was provisioned through HOSTINGER operations, UAB, a known bulk‑hosting provider often leveraged for rapid deployment of fraudulent pages.

An SSL certificate identified as "WR1" was observed, but the certificate’s validation details are not disclosed, limiting confidence in its authenticity. The page title returned by the server is "Wallet Login," and the threat classification in the intelligence set labels the operation as a Crypto Scam. VirusTotal scanning recorded a single positive detection out of 93 security vendors, demonstrating that at least one engine flagged the domain as suspicious, though the majority of scanners did not raise an alert. The limited detection count, combined with the offline status, prevents a full behavioral assessment of the site’s content or payload.

Uncertainty remains regarding the specific phishing kit or credential harvesting method employed, as no additional artifacts such as URLs, JavaScript payloads, or evidence links were provided. Defenders should continue to block the IP address 91.108.101.246 and the domain vinanex.com at perimeter security devices, update URL filtering lists to include the domain, and monitor for any re‑hosting attempts that may arise from the same registrar or hosting ASN. Given the crypto‑focused lure implied by the "Wallet Login" title, user education campaigns should warn against unsolicited wallet authentication requests and encourage verification of legitimate service URLs before credential entry.