secure-link[.]cc

Analysis of secure-link.cc indicates active credential phishing infrastructure as of July 12, 2026. The domain, registered on August 23, 2025, through Dynadot LLC, resolves to IP address 172.67.151.68 and is protected by Cloudflare, with HTTP/3 support detected. The page title 'Security Check' suggests an attempt to mimic authentication or verification processes, though the exact content and targeted brand remain unconfirmed due to lack of direct analysis. The domain holds a trust score of 0/100 and appears on two security blocklists, including PhishDestroy and BLP-Malware. AlienVault OTX records show the domain in 22 threat intelligence pulses, reinforcing its association with malicious activity. Six of 95 security vendors on VirusTotal flag the domain as malicious, though this does not represent a full consensus. The SSL certificate is issued by Google Trust Services, a common feature in both legitimate and phishing sites. Defenders should treat secure-link.cc as high-risk infrastructure, particularly for credential harvesting. Blocking the domain at the network level and monitoring for related indicators, such as the resolving IP, is recommended. Further investigation into connected campaigns or affiliate domains may be warranted given its presence in multiple threat intelligence sources.