onlineremotasks[.]cc

This domain, onlineremotasks.cc, was registered through NameSilo, LLC on March 25, 2025. The authoritative nameservers are laila.ns.cloudflare.com and simon.ns.cloudflare.com, indicating that the site was hosted behind Cloudflare's network (ASN 13335). DNS resolution points to IP address 104.21.2.226, which is located in the United States and belongs to Cloudflare, Inc. The TLS certificate presented by the server is issued by Google Trust Services under the WE1 root, confirming that HTTPS was enabled at the time of observation. The only visible page title returned by the server is “onlineremotasks.cc | 520: Web server is returning an unknown error”, which suggests that the web service was experiencing an internal Cloudflare error rather than delivering legitimate content.

VirusTotal analysis recorded nine detections out of ninety‑five scanned security vendors, and the domain appears on a single public blocklist. PhishDestroy has also listed the domain as blocked, and Gridinsoft assigned a trust score of 1 out of 100, the lowest possible rating. The overall risk rating was designated as elevated, and the campaign status is currently offline. Based on the available evidence, the infrastructure points to a typical phishing hosting pattern: rapid domain registration, use of Cloudflare's free tier for anonymity, and a low‑trust SSL chain.

No additional intelligence such as Safe Browsing verdicts, OTX tags, or detailed payload analysis is provided, so the exact phishing target or lure remains unknown. Defenders should treat any traffic to onlineremotasks.cc as malicious. Immediate actions include adding the domain and its resolving IP address to network blocklists, configuring DNS sinkholing for the associated Cloudflare nameservers, and monitoring for any new DNS records that may be created under the same registrar. Continuous review of threat‑intel feeds for re‑registration attempts is advised, as actors frequently recycle compromised domains after takedown.