oseapp[.]cc

Analysis indicates that oseapp.cc is a high-risk domain currently flagged for generic phishing activity. Registered on May 12, 2026, through Dynadot Inc, the domain remains active as of July 17, 2026. It resolves to IP address 172.67.138.241 and uses Cloudflare nameservers (amy.ns.cloudflare.com and cleo.ns.cloudflare.com), a common pattern observed in phishing infrastructure to obscure hosting origins. The SSL certificate is issued by Let's Encrypt (serial YE1), which does not inherently indicate malicious intent but is frequently leveraged by threat actors due to its accessibility and short validity periods. Three out of 91 security vendors on VirusTotal have detected this domain as malicious, suggesting early but limited confirmation of its threat status. The exact nature of the phishing content is not yet analysed, and no specific brand impersonation or scam category (e.g., banking, social media, or corporate login theft) has been identified in available intelligence. Defenders should treat oseapp.cc as an active threat, block the domain and its resolving IP at perimeter security controls, and monitor for connections from internal assets. Given the domain's recent registration and Cloudflare-backed hosting, further investigation into associated subdomains or linked infrastructure is recommended to assess the scope of the campaign.