vestmaze[.]com

vestmaze.com is a recently activated high-risk phishing domain designed to deceive users into believing it represents the legitimate business VEST MAZE LIMITED. The site leverages an SSL certificate from Let’s Encrypt to appear trustworthy, but its actual purpose is to harvest sensitive user data such as login credentials, payment details, or personal information through fraudulent forms or links. The page title explicitly mimics legitimate branding, increasing the likelihood of successful deception among unsuspecting visitors. This domain was flagged by only 1 out of 95 VirusTotal security vendors, highlighting how newly registered phishing domains can evade detection initially. It resolves to IP address 92.113.23.197 and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 20, 2025—just days ago—indicating a fresh and rapidly evolving threat. Despite its low current detection rate, the domain remains active as of this report, posing an immediate danger to anyone who accesses it. If you have visited vestmaze.com, stop entering any information immediately and check your accounts for unauthorized access. Run a full antivirus scan on your device to detect potential malware. Report the domain to your internet service provider or cybersecurity team, and avoid clicking any links or downloading files from this site. Consider changing passwords for sensitive accounts, especially if you entered any data on the page. Stay vigilant—this domain is actively being used in phishing campaigns and should be treated as a confirmed threat.