v60008[.]cc

The domain v60008.cc is suspected to be involved in credential theft, a specific form of phishing attack. The domain does not appear to be directly impersonating a well-known brand, but it is actively used in attempts to steal user credentials. Analysis of the domain reveals the use of a phishing kit that mimics legitimate login pages to harvest sensitive information from unsuspecting users.

Infrastructure analysis of v60008.cc indicates a high level of malicious activity. The domain has been flagged by 5 out of 95 security vendors on VirusTotal, suggesting a moderate level of recognition among cybersecurity tools. The domain is registered through Gname.com Pte. Ltd., a registrar with a mixed reputation for domain registration. It resolves to an IP address 188.114.96.3, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain was created on June 09, 2026, and currently holds an SSL certificate issued by Google Trust Services / WE1. Despite the presence of this certificate, the domain appears on three security blocklists, indicating it has been identified as a threat by multiple sources.

The domain v60008.cc remains active as of the latest assessment. Given its presence on multiple blocklists and the detection by security vendors, it is recommended that users avoid accessing this domain. The immediate response actions should include updating firewalls and security software to block this domain and educating users about the risks of credential theft. The remaining risk is high, as the domain continues to resolve and could be used in further phishing campaigns. Users are advised to verify the URLs of websites they visit and to use multi-factor authentication to protect their accounts.