vinted-verif[.]hspyjj[.]com

PhishDestroy identifies vinted-verif.hspyjj.com as an active domain engaged in brand impersonation with a high risk of credential theft, currently under investigation as a generic phishing threat. This site mimics Vinted’s verification process to harvest user login details and personal data, posing immediate danger to unsuspecting visitors. The domain’s malicious intent is further underscored by its recent activity and lack of detection on security platforms. This domain was flagged by PhishDestroy with the following indicators: registered through Gname.com Pte. Ltd., resolved to IP 104.21.71.72, and secured via a Let’s Encrypt SSL certificate. The domain was created on April 13, 2017, and remains undetected by VirusTotal with 11/95 engines flagging it as malicious. Additionally, its long-standing presence and association with suspicious subdomains heighten the risk profile, though it has not yet appeared on major blocklists or threat intelligence feeds. Trust scores for the domain and its hosting infrastructure remain unacceptably low, reinforcing its dubious nature. To mitigate the threat posed by vinted-verif.hspyjj.com, users and organizations are advised to block the domain at the network level and avoid accessing it under any circumstances. Enterprises should update firewall rules and endpoint protections to flag this domain as malicious. If credentials were entered, immediately reset passwords and enable multi-factor authentication on all related accounts. Report the domain to your security team or abuse channels (e.g., abuse@gname.com, abuse@cloudflare.com) to aid in takedown efforts. Vigilance is critical to prevent falling victim to credential theft or further compromise.