uscr[.]cc

uscr.cc was registered on 26 December 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to 188.114.96.3, an address owned by Cloudflare (AS13335) and located in the United States. No SSL certificate is presented, indicating that HTTPS connections are not available. The authoritative nameservers are cora.ns.cloudflare.com and justin.ns.cloudflare.com, both belonging to Cloudflare’s DNS service.

The site’s HTTP response returned the title “Nur einen Moment…”, but the host has been taken offline at the time of analysis. Reputation data shows the domain appears on a single security blocklist and is specifically listed by PhishDestroy. VirusTotal analysis recorded detections from seven of ninety‑three scanning engines, confirming that multiple security products consider the site malicious. The available evidence points to a generic phishing operation, although the exact target brand or credential‑capture vector has not been disclosed.

Uncertainty remains regarding the full scope of the phishing campaign, the content that was served before takedown, and whether additional infrastructure (e.g., drop‑sites or command‑and‑control servers) is associated with the same registrar. Defenders should block the domain at perimeter firewalls and DNS resolvers, monitor Cloudflare‑associated IP ranges for related activity, and add the domain to internal blacklist feeds. Continuous re‑scanning of the IP address and periodic checks of the registrar’s WHOIS records are recommended to detect any re‑registration attempts. Organizations using web‑filtering solutions should ensure the domain is flagged in real‑time threat‑intelligence feeds to prevent end‑user exposure.