vetom[.]cc

vetom.cc is identified as an active generic phishing site distributing malware through a counterfeit login portal. The domain is currently operational and poses a significant risk to unsuspecting users seeking legitimate services. This domain was flagged by 8 of 95 VirusTotal vendors, indicating a high likelihood of malicious activity. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, vetom.cc resolves to IP 188.114.97.3 and utilizes a Let's Encrypt SSL certificate. The domain was created on March 30, 2026, suggesting a recently established threat infrastructure. Users are advised to avoid interacting with vetom.cc and report any suspicious communications to their IT security teams. Organizations should block this domain and IP at the network perimeter to prevent potential credential theft or malware infections. Immediate action is recommended to mitigate exposure to this elevated-risk threat.