rechallenger[.]pro

The domain rechallenger.pro was registered on 2026-02-21 through PDR Ltd. d/b/a PublicDomainRegistry.com and uses the dns1.regway.com, dns2.regway.com, dns3.regway.com, and dns4.regway.com name servers. Active monitoring shows the domain resolves to the IPv4 address 194.59.30.154, an address attributed to Virtuo Networks France SAS located in France. VirusTotal records indicate that 15 of 93 scanned security vendors marked the domain as malicious, reflecting a consensus among a subset of scanners. AlienVault OTX has inserted the domain into 14 distinct threat‑intelligence pulses, reinforcing its presence in the malicious‑infrastructure ecosystem. The domain appears on a single public security blocklist and is explicitly blocked by the PhishDestroy filtering service.

Current net‑status checks confirm the site is taken offline, and no HTTP response is observable. The only visible page artifact is the title “rechallenger.pro”, which provides no additional context about the intended victim or lure. Evidence of SSL/TLS configuration, content delivery, or specific phishing kits is not available at this time. Consequently, analysts lack details on the exact credential‑harvesting technique or targeted brand. Defenders should continue to deny any connections to 194.59.30.154 at the network perimeter and ensure that DNS resolvers are configured to block rechallenger.pro via existing blocklists.

Updating intrusion‑detection signatures to reflect the 15 VirusTotal detections and the OTX pulse identifiers will improve detection of related activity. Because the domain’s hosting provider is Virtuo Networks France, reviewing other domains hosted on the same IP may reveal parallel campaigns. Monitoring future DNS queries for the domain or its name servers can provide early warning if the site resurfaces. Until additional forensic artefacts become available, the domain should be treated as a confirmed phishing infrastructure and incorporated into threat‑intel feeds.