pws24[.]cc

Analysis of pws24.cc indicates that the domain is associated with elevated‑risk phishing activity. The domain was registered through Dynadot LLC on August 19, 2024 and is delegated to Cloudflare name servers peyton.ns.cloudflare.com and ximena.ns.cloudflare.com. No SSL certificate is presented, meaning HTTPS connections are not secured. DNS resolution points to IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States.

Trust scoring from Gridinsoft assigns a value of 0 out of 100, reflecting a complete lack of reputation. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that threat‑intel communities have identified it as malicious. VirusTotal scans show that three of ninety‑five antivirus engines flagged the domain, providing additional independent corroboration of suspicious behavior. Current status is offline, suggesting that the site has been taken down or is otherwise inaccessible.

What remains uncertain is the specific content or lure employed by the site, as no page title, brand reference, or detailed payload information is available in the collected intelligence. Defenders should therefore treat pws24.cc as a high‑confidence indicator of phishing infrastructure. Recommended actions include adding the domain and its associated IP address to network deny lists, monitoring for any resurrection or DNS changes, and ensuring that endpoint protection solutions incorporate the latest blocklist entries. Continuous re‑evaluation is advised in case the domain resurfaces or additional forensic evidence emerges.