vertex360[.]cc

This domain, vertex360.cc, is flagged as a high-risk credential harvesting phishing site targeting user login credentials. Analysis indicates the infrastructure is actively collecting sensitive authentication data, likely through fake login portals impersonating legitimate services. The threat type aligns with patterns observed in credential theft campaigns, where victims are tricked into entering usernames, passwords, or multi-factor authentication codes into fraudulent forms. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 144.124.230.37 and was registered on June 17, 2026, through NameSilo, LLC. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its free and automated issuance process. VirusTotal reports 1 out of 95 security vendors flagging the domain as malicious, suggesting limited but confirmed detection. No widespread blocklist inclusion is observed at this time, though the domain remains active and operational. The creation date, set in the future, may indicate an attempt to evade reputation-based filtering or suggest a placeholder for planned malicious activity. Mitigation steps for organizations and end users include immediate blocking of the domain and its associated IP address at the network perimeter. Security teams should monitor for connections to 144.124.230.37 in proxy logs and endpoint telemetry, as this may indicate compromised credentials or ongoing phishing attempts. Users who may have interacted with the domain should be instructed to reset passwords for any accounts entered on the site, enable multi-factor authentication where available, and review account activity for unauthorized access. Domain registrars and certificate authorities should be notified of the abuse to facilitate takedown or revocation of the SSL certificate if warranted.