vincentiannaco[.]com

Vincentiannaco.com was created on April 28, 2026 and is registered through Fewmoretaps OU d/b/a Trustname.com. The domain resolves to 194.58.106.232, an IP located in Russia and served by the nameservers ns1.hosting.reg.ru and ns2.hosting.reg.ru. The site presents a valid Let’s Encrypt R11 TLS certificate, yet an HTTP request returns a 403 status, indicating that the payload is being actively served while denying generic access. Gridinsoft assigns the domain a trust score of 0 out of 100, reflecting an extremely low reputation.

The domain appears on a single security blocklist and is currently blocked by PhishDestroy. VirusTotal analysis shows that 1 of 95 security vendors has flagged the domain, and AlienVault OTX records the IP in one threat‑intelligence pulse. These indicators collectively point to a high‑risk, active phishing operation despite the relatively low detection count among scanners.

Uncertainty remains around the scope of the campaign. The single vendor flag suggests limited visibility, and the 403 response may be a temporary mitigation rather than a permanent takedown. No additional infrastructure such as drop sites or secondary C2 hosts is observable from the available data, leaving the full extent of the malicious infrastructure ambiguous.

Defenders should immediately block both the domain vincentiannaco.com and its resolved IP address 194.58.106.232 at perimeter and DNS layers. Continuous monitoring of the associated nameservers and any future reputation changes is advised, as well as incorporation of the domain into internal threat‑intel feeds. Given the high risk rating, organizations should also consider user‑education alerts targeting potential credential‑harvesting attempts that may leverage this infrastructure.