modvigilaustralia[.]net

This domain, modvigilaustralia.net, is identified as a fake login portal specifically designed to impersonate the legitimate pharmaceutical brand Modvigil (modvigilaustralia.com). Analysis indicates the site was operational as a credential harvesting page, targeting users seeking prescription medication or brand-specific services. The domain is currently offline, but prior activity suggests it was actively used for phishing operations. Infrastructure analysis reveals the domain was registered on June 12, 2026, through Fewmoretaps OU d/b/a Trustname.com. It resolved to the IPv6 address 2a02:4780:2b:1780:0:2a42:b2f6:9 and utilized a Let's Encrypt SSL certificate, a common tactic to lend false legitimacy. The domain appears on one security blocklist and was flagged by 5 of 95 security vendors on VirusTotal, including detections for phishing and malicious content. The page title, modvigilaustralia.com, further confirms the intent to deceive users by mimicking the legitimate brand. The domain is currently offline, but its prior use as a phishing site warrants continued monitoring. Organizations and users are advised to block the domain and its associated IP address at the network level. Security teams should review logs for connections to 2a02:4780:2b:1780:0:2a42:b2f6:9 and alert any users who may have interacted with the site. If credentials were entered, immediate password resets and multi-factor authentication enforcement are recommended. Domain registrars and hosting providers should be notified of the malicious infrastructure for potential takedown actions.