messol[.]network

This domain, messol.network, is currently flagged as an active crypto scam by security vendors and blocklists. Analysis indicates the domain resolves to 198.18.0.215, an IP address hosted on Cloudflare's infrastructure (AS13335). The site is protected by Cloudflare, which is evident from the detected technologies, including HTTP/3, and the nameservers meilani.ns.cloudflare.com and zahir.ns.cloudflare.com. The domain's SSL certificate is issued by Google Trust Services, specifically under the WE1 intermediate, which is consistent with Cloudflare's managed SSL offerings. The domain appears on at least one security blocklist and is flagged by 2 out of 95 security vendors on VirusTotal as malicious. The HTTP status code returned is 403, suggesting access is restricted or the server is configured to deny requests, which may be a tactic to evade automated scanning or analysis. The page title, 'Nur einen Moment…', is a generic placeholder often associated with Cloudflare's interstitial pages, indicating the site may be in a transitional state or configured to filter traffic. The scam type is classified as a crypto scam, though the exact mechanics or targeted cryptocurrency platforms are not specified in available data. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., and the IP location is mapped to the United States. The Gridinsoft trust score of 0/100 further corroborates the domain's malicious classification. Defenders should treat this domain as high-risk and consider blocking it at the DNS or network level. Monitoring for related domains or IPs within the same ASN (13335) may help identify additional threats. Given the domain's active status and association with known malicious activity, organizations are advised to review logs for any connections to 198.18.0.215 or messol.network and investigate potential exposure.