ll24[.]cc

The domain ll24.cc, active since November 2021, is currently flagged by only 2 out of 91 vendors on VirusTotal, indicating a low detection rate. Despite its low visibility on security platforms, it has been identified as a phishing threat and is listed on one public blocklist, specifically by PhishDestroy. This domain is hosted on an IP address managed by Cloudflare in the United States, with SSL certification issued by Google Trust Services.

The relatively low detection rate on VirusTotal suggests that ll24.cc may still be actively used for phishing activities, potentially exploiting the gap between domain registration and antivirus database updates. This gap often spans 24 to 72 hours, during which time phishing domains can operate with minimal interference. PhishDestroy's proactive identification of this domain underscores its commitment to catching threats early, even before they appear on most security vendors' radars.

Registered through DotWee Limited, ll24.cc's continued activity since its creation highlights the persistent nature of phishing threats. The use of reputable services like Cloudflare for hosting and Google Trust Services for SSL certification may lend an appearance of legitimacy, making it crucial for stakeholders to remain informed about such domains. The inclusion of ll24.cc in PhishDestroy's blocklist serves as a critical alert to its potential for malicious activity.