cnssssex10[.]com

This domain, cnssssex10.com, is identified as a credential theft infrastructure designed to impersonate legitimate login portals. Analysis indicates the site likely targets users by presenting fake authentication interfaces to capture usernames, passwords, and other sensitive information. The domain does not appear to be associated with a specific brand but operates as a generic credential harvester, a common tactic in large-scale phishing campaigns. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain resolves to the IP address 185.53.179.146 and is flagged by 14 out of 95 security vendors on VirusTotal. It appears on three security blocklists, including PhishDestroy, OISD, and Maltrail, confirming its classification as malicious. The domain was registered on March 22, 2026, through Dynadot Inc, a registrar frequently observed in phishing operations. Its current status is offline, though historical activity suggests it may have been active in prior credential harvesting campaigns. Users who visited cnssssex10.com or entered credentials on the site should assume their information has been compromised. Immediate actions include resetting passwords for any accounts accessed during the exposure window, enabling multi-factor authentication where available, and monitoring financial and communication channels for unauthorized activity. System scans using updated security tools are recommended to detect potential secondary infections. Organizations should review logs for connections to 185.53.179.146 and the domain itself to identify affected endpoints.