cc-hubinstitute[.]online[.]tradxx[.]online

This domain, cc-hubinstitute.online.tradxx.online, is a credential harvesting phishing site designed to mimic legitimate login portals. Analysis indicates the page presents a fraudulent login interface titled 'Login - CC-HUBINSTITUTE,' targeting users to capture sensitive credentials such as usernames, passwords, and potentially multi-factor authentication codes. The site employs common web technologies to appear authentic, increasing the likelihood of successful deception against unsuspecting visitors.

Infrastructure analysis reveals the domain was registered on April 9, 2024, through NameCheap, Inc. and resolves to the IP address 198.12.93.82. As of the latest assessment, the domain is flagged by 2 out of 95 security vendors on VirusTotal, indicating limited but confirmed detection. It appears on one security blocklist, and a trust score of 0/100 further corroborates its malicious nature. Technologies detected include PHP, Bootstrap, LiteSpeed, Cloudflare, Unpkg, SweetAlert, and jQuery, which are often leveraged to enhance the site's appearance and functionality while evading basic detection mechanisms.

Users who visited cc-hubinstitute.online.tradxx.online or entered credentials on the site should immediately revoke any exposed passwords and enable multi-factor authentication on associated accounts. Monitor linked financial or sensitive accounts for unauthorized activity and report any suspicious transactions. If corporate credentials were used, notify the internal security team to initiate incident response protocols. The domain has been taken offline, but users should remain vigilant for similar phishing attempts targeting the same organization or sector.