privix-co[.]puranet[.]pro

Analysis of privix-co.puranet.pro was conducted on July 24, 2026. The domain is currently marked offline, and its DNS resolution points to IP address 188.114.96.3, which belongs to AS13335 operated by Cloudflare, Inc. and is geolocated in the United States. The registration record indicates that the domain was registered through Cloudflare, Inc., and the authoritative nameserver entry returned NS_NOT_FOUND, suggesting that the domain’s name server information is not publicly resolvable at the time of analysis. TLS inspection shows a certificate issued by Google Trust Services under the WE1 designation, confirming the use of a valid public‑trusted certificate chain.

The hosting infrastructure reports the presence of Cloudflare services and HTTP/3 protocol support, consistent with the observed CDN configuration. VirusTotal scans have flagged the domain on nine of ninety‑five vendor engines, indicating a moderate level of consensus among security products that the site is malicious. In addition, the host appears on two external blocklists, specifically PhishDestroy and ScamSniffer, both of which have classified the site as a phishing vector. The page title returned from the HTTP response is “Privix,” and no further content analysis is available because the site is offline.

The available evidence points to a typical phishing deployment that leverages Cloudflare’s network to mask the origin of malicious traffic while presenting a legitimate‑looking TLS certificate. Defenders should continue to block DNS resolution for privix-co.puranet.pro, add the associated IP address 188.114.96.3 to network‑level deny lists, and monitor for any re‑use of the same infrastructure in future campaigns. Users should be warned that any login or credential submission to a site presenting the “Privix” title is likely fraudulent.