auth-enusus[.]cc

This domain, auth-enusus.cc, is flagged as an active credential theft operation targeting users of ProTrade Academy, a legitimate online trading education platform. Analysis indicates the site is designed to harvest login credentials, financial details, or personal information under the guise of professional trading courses. The domain remains operational as of the latest verification, posing a direct risk to visitors seeking educational resources. Infrastructure analysis reveals the domain resolves to IP address 185.178.208.165 and was registered on June 20, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The SSL certificate is issued by Let's Encrypt, a common tactic to appear legitimate. VirusTotal reports 3 of 95 security vendors have flagged this domain as malicious, with additional blocklist entries confirming its high-risk classification. The creation date, registrar choice, and hosting IP align with patterns observed in credential theft campaigns. Current status confirms the domain is still active and resolving. Organizations and individuals are advised to block this domain at the DNS or network level immediately. End users should avoid interacting with the site, reset credentials if exposure is suspected, and verify the legitimacy of any trading or educational platform through official channels. Monitoring for similar domains registered under the same registrar or IP range is recommended to preempt further threats.