strobe-updates[.]live

Analysis of strobe-updates.live indicates an active credential phishing infrastructure. The domain was registered on April 21, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is hosted on Cloudflare infrastructure, resolving to IP 188.114.96.3 located in Canada. SSL is provided by Let’s Encrypt (E8), and HTTP requests return a 403 status code, while the page title is limited to “Just a moment…”, consistent with a Cloudflare challenge page. The domain’s trust score is 0/100 on Gridinsoft, and it is currently blocked by PhishDestroy and appears on one security blocklist. VirusTotal reports a single positive detection out of 94 scanners, and AlienVault OTX lists the domain in one threat pulse. No additional content analysis is available, so the exact phishing payload, target brand, or credential collection mechanism remains unknown. Defenders should immediately block DNS resolution and HTTP/HTTPS traffic to strobe-updates.live, incorporate the domain into URL filtering policies, and monitor for any outbound connections to the associated IP address. Continuous threat‑intel feeds should be consulted for updates, and any credential compromises potentially linked to this domain should be investigated and mitigated.