ccnyiw3564[.]click

Analysis of the domain ccnyiw3564.click indicates it is an active credential-harvesting phishing site. Registered on November 22, 2025, through NameSilo, LLC, the domain currently resolves to IP address 91.195.240.123. Infrastructure analysis reveals the use of Cloudflare services, including Cloudflare Browser Insights and HTTP/3 protocol support, alongside an SSL certificate issued by Google Trust Services. The domain appears on three security blocklists and is flagged by 22 threat intelligence pulses in AlienVault OTX. Sixteen security vendors on a multi-scanner platform detect malicious activity associated with this domain. The page title, 'ccnyiw3564.click - ccnyiw3564 Resources and Information,' provides no explicit indication of a targeted brand or service, and no phishing kit or specific scam category has been identified in available data. The domain remains active as of July 12, 2026, with a Scamadviser trust score of 21/100 and a Gridinsoft trust score of 0/100, reinforcing its high-risk classification. Defenders are advised to block the domain and its associated IP address at the network level, monitor for related indicators of compromise, and alert users to avoid interaction with the site. Further analysis of the site's content may reveal additional threat details, but current evidence confirms its malicious intent.