shortwa[.]cc

The domain shortwa.cc is identified as a generic phishing site with an elevated risk level. No specific brand or drainer kit is associated with this domain. The primary threat posed is the potential for credential harvesting, which could lead to unauthorized access to sensitive accounts and data.

Infrastructure analysis reveals that shortwa.cc has been flagged by 19 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. The domain is registered through NiceNIC International Group Co., Limited and resolves to the IP address 188.114.96.3, which is located in the United States and belongs to AS13335 Cloudflare, Inc. The domain was created on June 25, 2025. It does not have an SSL certificate, and its page title is '404 — Page Not Found.' The domain appears on one security blocklist and is blocked by PhishDestroy.

The current status of shortwa.cc is offline, which reduces the immediate risk to users. However, the domain's offline status does not eliminate the potential for it to be reactivated in the future. Organizations and individuals should ensure that their security measures are up-to-date and that users are educated on the signs of phishing attacks. Regular monitoring of domain activity and maintaining a robust incident response plan are recommended to mitigate any residual risks.