vignen[.]pro

This domain, vignen.pro, is under investigation for credential theft targeting users through brand impersonation. The site presents itself as a 'trusted partner' to deceive visitors into submitting sensitive login credentials, including corporate or financial account details. Analysis of the page title and content structure suggests an attempt to mimic legitimate service providers, increasing the likelihood of successful social engineering attacks against unsuspecting users. Infrastructure analysis reveals the domain was registered on June 25, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to the IP address 62.60.226.180. Despite its active status, the domain has not been flagged by antivirus engines, with a VirusTotal detection score of 0/95. However, it has appeared in two AlienVault OTX threat intelligence pulses, indicating prior suspicion by security researchers. The lack of antivirus detections does not preclude malicious intent, particularly given the domain's recent registration and deceptive branding. Users who have visited vignen.pro or entered credentials on the site should immediately revoke access to any submitted accounts and enable multi-factor authentication where available. Monitor linked accounts for unauthorized activity, including password changes or unrecognized transactions. Security teams should block the domain and its resolving IP (62.60.226.180) at the network level to prevent further exposure. If corporate credentials were exposed, initiate an internal audit to assess potential lateral movement or data exfiltration risks. Given the domain's low detection rate, manual inspection of endpoint logs for connections to 62.60.226.180 is recommended.