vinted[.]view-my-orders[.]icu

The domain vinted.view-my-orders.icu presents itself with a page title of "Captcha verification," which is a common technique used to deceive users into believing they are completing a security check. This site is designed to impersonate the Vinted brand, likely as part of a phishing or credential harvesting campaign. The threat posed includes the potential theft of user login credentials, personal information, or session tokens, as the fake Captcha page may redirect victims to malicious forms or scripts.

Technical analysis reveals that VirusTotal has flagged this domain with 6 out of 95 detections, indicating it is recognized as malicious by security vendors including CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, and Gridinsoft. The domain is registered through Web Commerce Communications Limited and was created on November 20, 2025. It resolves to IP address 172.67.132.139, located in the United States and hosted by Cloudflare, Inc. (AS13335). No SSL certificate is present, and the nameservers are armfazh.ns.cloudflare.com and ingrid.ns.cloudflare.com. The domain is listed on 1 blocklist.

Currently, the site is reported as DOWN/OFFLINE, which may indicate it has been taken down or is temporarily inactive. The risk level is high due to the clear impersonation of a known brand, the use of a deceptive Captcha page, and the low trust score of 0/100 from GridinSoft. Users who may have visited the site while active are at risk of compromise, and monitoring for associated activity is advised.