cossu[.]online

cossu.online was registered on May 07, 2026 through eNom, LLC. The domain is currently active and classified under the generic_phishing threat type. The only visible page title returned by HTTP GET is “cosamangiooggi”, which does not correspond to any known legitimate brand or service. The domain is listed on a single security blocklist and has been flagged by PhishDestroy as malicious. Technical resolution shows the domain resolves to IP address 104.21.64.50, which belongs to Cloudflare, Inc. and is geolocated to California, United States. The authoritative name servers are huxley.ns.cloudflare.com and ligia.ns.cloudflare.com, both operated by Cloudflare. HTTPS connections are protected by a certificate issued by Google Trust Services under the WE1 root, indicating a valid TLS chain but offering no indication of the site's intent. VirusTotal has recorded 0 detections out of 95 scanners, meaning the site has not yet been flagged by automated malware engines. However, AlienVault OTX includes the domain in one threat intelligence pulse, and the Gridinsoft trust score is 0 out of 100, reflecting a low reputation. The combined presence on a blocklist, the PhishDestroy flag, and the observed page title suggest a phishing campaign despite the lack of automated detections. Given the recent creation date, the active status, and the alignment of infrastructure with known phishing hosting patterns, defenders should treat cossu.online as a high‑confidence phishing indicator. Organizations should block the domain at perimeter firewalls, update DNS filtering policies, and monitor for any credential submission attempts that reference the domain. Continuous re‑evaluation is advised, as future VirusTotal scans may raise the detection count.