websear[.]cc

The domain websear.cc was registered on 21 February 2026 through Dominet (HK) Limited and is currently listed as offline. Analysis of public records shows that the domain resolves to the IPv6 address 2606:4700:3030::6815:3001, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The authoritative name servers are annabel.ns.cloudflare.com and troy.ns.cloudflare.com, confirming that the site leveraged Cloudflare’s CDN and DNS services. The TLS certificate presented is issued by Google Trust Services under the WE1 designation, indicating a valid certificate chain but offering no indication of malicious intent beyond the surrounding context.

Infrastructure observations reveal the use of modern web technologies, including Vue.js, Lodash, and HTTP/3, which are common in legitimate sites and suggest that the actors employed a contemporary front‑end stack. However, the Gridinsoft trust score of 0 out of 100 signals a severe lack of confidence in the domain’s reputation. VirusTotal reports that fifteen of ninety‑three scanning engines have flagged the domain, reinforcing the suspicion of malicious activity. Google Safe Browsing classifies the site as a social‑engineering threat, and the domain appears on a single external blocklist, where it has been actively blocked by the PhishDestroy service.

The available evidence points to a high‑risk generic phishing operation, yet the exact payload, target brand, or credential‑harvesting page has not been publicly disclosed. Defenders should therefore treat any traffic to websear.cc as hostile. Recommended actions include updating firewall and proxy rules to block the IPv6 address and associated hostnames, adding the domain to internal blocklists, monitoring DNS queries for the Cloudflare name servers, and ensuring that endpoint protection solutions are aware of the fifteen VirusTotal detections.