77093[.]cc

This domain, 77093.cc, is actively engaged in credential theft operations, targeting users who enter sensitive login information. Analysis indicates the site is designed to harvest usernames, passwords, and other authentication details, which may be used for unauthorized account access or sold on underground markets. The threat is not limited to a single platform, increasing the risk for individuals across multiple services. Infrastructure analysis reveals the domain was registered on July 11, 2024, through Gname.com Pte. Ltd., a registrar frequently associated with malicious activity. It currently resolves to the IP address 103.27.177.163 and is flagged by 9 out of 95 security vendors on VirusTotal. Additionally, the domain appears in one threat intelligence pulse on AlienVault OTX, further confirming its malicious classification. The short lifespan and rapid detection by security tools suggest a deliberate effort to evade takedowns while maximizing exposure. If you or someone in your network has visited 77093.cc, immediate action is required. First, disconnect the affected device from the internet to prevent potential data exfiltration. Run a full antivirus scan to detect and remove any malware or persistent threats. Change passwords for all accounts accessed from the compromised device, prioritizing email, financial, and work-related platforms. Enable multi-factor authentication where available to add an extra layer of security. Monitor accounts for unusual activity and report any unauthorized access to the relevant service providers. If sensitive data was entered, consider notifying your organization’s security team or a professional incident response service.