3658997[.]cc

Analysis on 3658997.cc, created on July 18 2026 and currently active, shows that the domain resolves to the IPv4 address 52.184.80.75. Registration was performed through Dynadot Inc, and the authoritative name servers are dalary.ns.cloudflare.com and jacob.ns.cloudflare.com, indicating that the domain uses Cloudflare's DNS service. The short lifespan between registration and detection suggests a rapid deployment typical of phishing infrastructure. The domain is listed on at least one external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service. VirusTotal reports that seven of ninety‑five scanning engines have flagged the domain, providing a modest but notable detection ratio that aligns with its high‑risk rating. No additional public indicators such as SSL certificate details, HTTP response codes, or page title have been published, leaving the content of the hosted site unverified. Given the confirmed resolution to a cloud‑hosted IP, the presence on a blocklist, and multiple vendor detections, defenders should treat traffic to 3658997.cc as malicious. Recommended actions include adding the domain to network deny lists, updating endpoint protection signatures, and monitoring for any outbound connections to the associated IP address. Continuous re‑evaluation is advised, as further analysis of the website’s payload or landing page could reveal additional tactics, techniques, and procedures.