wincent[.]cc

wincent.cc is currently listed as an active generic phishing infrastructure. The domain was registered on July 07, 2026 through Gname.com Pte. Ltd. and is hosted on the IP address 104.21.19.168, which resolves to Cloudflare’s edge network. Both authoritative DNS zones are delegated to Cloudflare’s nameservers jimmy.ns.cloudflare.com and norah.ns.cloudflare.com, indicating the operator is leveraging Cloudflare’s DNS and CDN services to obscure location and provide resilience.

VirusTotal has identified the domain as malicious in 8 of 91 scanned security engines, confirming that multiple detection products flag it as suspicious. The domain appears on a single public blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing resource. No public page title, SSL certificate details, or HTTP response codes have been disclosed, so the surface‑web characteristics remain unknown.

Analysts should treat wincent.cc as high‑risk and enforce network‑level deny rules or sink‑hole redirects for any outbound queries to the associated IP and its Cloudflare nameservers. Continuous monitoring of DNS resolutions and inclusion in threat‑intel feeds is recommended, as the short lifespan of the registration suggests an opportunistic campaign that may be rotated to new domains. Defenders are advised to update URL filtering and email security gateways to block any references to wincent.cc, and to investigate related traffic for potential credential harvesting attempts.