cdeposit[.]vip

PhishDestroy has identified cdeposit.vip as an active phishing domain designed to mimic a legitimate banking portal, posing a high risk to users who may unknowingly enter their login credentials. This domain leverages urgency and familiarity to deceive victims into disclosing sensitive financial information, which can then be harvested for fraudulent transactions or sold on dark web markets. The threat is particularly insidious because the domain uses a Let’s Encrypt SSL certificate, giving it an air of legitimacy, while resolving to IP address 188.114.97.3. Users should treat this domain with extreme caution and avoid any interaction that involves inputting personal or financial data. This domain was flagged for its malicious intent, with VirusTotal currently showing 1/95 detections, indicating it has not yet been widely recognized by security vendors. It was registered through NameSilo, LLC on March 28, 2026, making it a very recent addition to the threat landscape. The lack of detections, combined with its recent creation, suggests this phishing campaign is still in its early stages, potentially targeting unsuspecting users before widespread blacklisting occurs. The domain’s infrastructure is hosted on Cloudflare, a common tactic to obfuscate the true origin of the server and evade takedown efforts. If you or someone you know has visited cdeposit.vip, immediately cease all interaction with the site and avoid entering any credentials or personal information. Do not click on any links or download any files from the domain. If you entered login details, change your passwords immediately across all accounts, especially banking and email services. Use a reputable antivirus or anti-phishing tool to scan your device for potential malware. Report the domain to your email provider, bank, and organizations like PhishDestroy or the Anti-Phishing Working Group to help mitigate the threat. Stay vigilant for unsolicited communications that mimic legitimate financial institutions, and always verify the authenticity of websites by checking URLs, SSL certificates, and domain registration details before interacting.