mymodvigil[.]com

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

Analysis of the domain mymodvigil.com indicates it is an active phishing site operational since April 28, 2026, registered through Fewmoretaps OU d/b/a Trustname.com. The domain resolves to IP address 31.184.236.239, hosted in the Czech Republic under Makis Systems Ltd, and currently returns an HTTP 302 redirect status, suggesting dynamic routing or evasion tactics. The page title 'Bot Detection' implies the site employs anti-analysis measures to distinguish automated security tools from human visitors, a common technique in phishing infrastructure to delay detection. Infrastructure analysis reveals the domain uses nameservers ns001.steady-dns.com and ns002.steady-dns.com, and an SSL certificate issued by Let's Encrypt (serial YE1), which provides encryption but does not validate legitimacy. AlienVault OTX records show the domain has appeared in 23 threat intelligence pulses, indicating prior detection by security communities. It is currently listed on one security blocklist, specifically PhishDestroy, though no detections are recorded across 91 scanning vendors as of the latest assessment. The domain maintains an MX record pointing to mxman.mymodvigil.com, which may facilitate phishing emails originating from the same infrastructure. While the exact target or brand impersonation is not confirmed in available data, the use of bot detection and redirect behavior aligns with phishing campaigns designed to evade automated analysis and prolong operational lifespan. Defenders should treat this domain as malicious and monitor associated IP and nameserver infrastructure for further activity. Given its active status and evasion techniques, continued scrutiny is warranted despite the absence of broader vendor detections.