cvvdumplogs[.]cc

cvvdumplogs.cc was registered on 2026-02-21 through NiceNIC International Group Co., Limited and is currently hosted behind Cloudflare (AS13335). DNS resolution points to 188.114.97.3, an IP located in the United States. The domain serves a page titled “cvvdumplogs.cc/auth/login” and returns an HTTP 302 redirect. The site uses PHP backend and front‑end libraries including Chart.js, Bootstrap, SweetAlert2, OWL Carousel, Moment.js and Moment Timezone delivered via jsDelivr. Security telemetry shows the domain is listed on one blocklist and is flagged by PhishDestroy. Gridinsoft assigns a trust score of 0/100. VirusTotal records two detections out of 95 scanned vendors. The SSL certificate is issued by Google Trust Services under the WE1 profile, indicating a valid TLS chain. The current status is active. Analysts have not observed additional indicators such as malicious payloads or credential harvesting scripts beyond the login page, so the full extent of the phishing infrastructure remains unknown. Defenders should block the domain at the DNS or proxy level, monitor outbound connections to the associated IP, and enforce credential‑phishing detection rules for traffic to the /auth/login path. Continued observation of the Cloudflare‑served endpoint is recommended to capture any evolution of the payload or new indicator sets.