order[.]rounitrade[.]com

This domain, order.rounitrade.com, is identified as a brand impersonation threat specifically targeting American Express customers. The infrastructure is designed to deceive users into believing they are interacting with an official American Express platform, potentially leading to unauthorized disclosure of sensitive financial credentials, personal information, or payment details. The page title, 'Vinted | Compra y vende ropa en una comunidad elegante,' is incongruent with the purported brand, indicating either misconfiguration or deliberate obfuscation to evade detection while maintaining operational infrastructure for malicious campaigns. Analysis of technical indicators reveals multiple red flags. The domain is flagged by 12 out of 95 security vendors on VirusTotal, a significant detection rate that underscores its malicious nature. It was registered through Dynadot LLC on December 01, 2025, suggesting recent creation for short-term malicious use. The domain resolves to the IP address 188.114.96.3, hosted on Cloudflare’s network (AS13335), a common tactic to obscure hosting origins and complicate takedown efforts. Additionally, the domain appears on one security blocklist, and no SSL certificate is present, further degrading its legitimacy. The current status is offline, but the infrastructure may be reactivated or repurposed for future attacks. Users who visited order.rounitrade.com should take immediate remedial actions. If any credentials, payment details, or personal information were entered, affected individuals should contact American Express directly to report potential fraud and request account monitoring or freezing. All passwords associated with the compromised information should be changed, and multi-factor authentication should be enabled on all critical accounts. Devices used to access the domain should be scanned for malware using updated security tools. Users are advised to monitor financial statements for unauthorized transactions and consider placing a fraud alert or credit freeze with major credit bureaus to mitigate identity theft risks. Given the elevated risk level, vigilance is recommended even if no immediate signs of compromise are observed.