vinted-verif[.]chunsety[.]com

PhishDestroy identifies the active domain vinted-verif.chunsety.com as a generic phishing host currently impersonating the Vinted marketplace under a verification pretext. The campaign is in active circulation and lures targets via social engineering tactics to steal account credentials and payment data. The infrastructure remains unblocked by major security vendors as of this report, increasing exposure risk to end users who may interact with deceptive links or messages referencing order verification or account security prompts.

This domain was flagged by 1 of 95 VirusTotal vendors, resolving to IP address 188.114.97.3. It is registered through Gname.com Pte. Ltd., utilizes a Let's Encrypt SSL certificate for HTTPS support, and was created on May 09, 2013. The domain remains unlisted on major threat intelligence blocklists and maintains moderate trust scores across several reputation engines, suggesting low prior abuse visibility despite its recent phishing alignment.

Due to active circulation and low vendor detection, the threat is classified as high risk until further evidence emerges. Organizations and individuals are advised to block the domain vinted-verif.chunsety.com at the network perimeter and DNS level. Users should avoid clicking any links related to Vinted verification outside the official domain and verify any suspicious communications directly via the authenticated Vinted platform. Security teams are urged to scan endpoints for signs of credential harvesting and implement enhanced monitoring for traffic originating from IP 188.114.97.3. This alert will be updated as new IOCs or detections are confirmed.