44445-a[.]cc

This domain, 44445-a.cc, is flagged as a high-risk generic phishing threat. Registered through Dynadot LLC on March 03, 2026, it remains active as of July 12, 2026. The page title retrieved is "验证" (Chinese for "verification"), but the specific brand or service it targets is not identified in available intelligence. The domain resolves to IP address 20.255.200.238, located in Hong Kong and hosted on AS8075 (Microsoft Corporation). Its SSL certificate is issued by Let's Encrypt (R13). Infrastructure analysis reveals Cloudflare nameservers (glen.ns.cloudflare.com and roxy.ns.cloudflare.com) and technologies including jQuery UI, jQuery CDN, and jQuery. Threat intelligence sources provide substantial indications of malicious activity: AlienVault OTX lists the domain in 24 threat intelligence pulses, and VirusTotal reports 14 of 95 security vendors flagging it as malicious. The Gridinsoft trust score is 0/100, and the domain appears on at least one security blocklist. PhishDestroy has blocked the domain. The HTTP response status is 301 (redirect), which may be used to route victims to a phishing page. Defenders should treat this domain as actively hostile and block all traffic to it at the network perimeter. Monitoring for related subdomains or variations linked to the same infrastructure is recommended, as the phishing campaign likely extends to other domains. Email filtering policies should quarantine any correspondence referencing this domain. The exact phishing kit or credential target remains unconfirmed; users who interacted with the site should change credentials on any service they may have entered. Regular review of DNS logs for lookups to 20.255.200.238 or similar patterns may help identify compromised hosts.