fate-coder[.]online
The domain fate-coder.online was registered on July 27, 2025 through NameCheap, Inc. Its authoritative nameservers are dolly.ns.cloudflare.com and nick.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s CDN. DNS resolution returns the IPv4 address 104.21.16.1, which belongs to AS13335 Cloudflare, Inc. in the United States. No TLS certificate is observed, so connections would be made over plain HTTP. The only visible page title returned by the server is “Just a moment…”, and the site is currently taken offline.
VirusTotal records show that the domain was scanned by 95 security vendors, none of which raised a detection at the time of scanning. The domain appears on a single public blocklist and is specifically listed by PhishDestroy as a malicious entry. No additional intelligence such as Safe Browsing verdicts, OTX tags, or brand targeting is available.
Because the domain is hosted on a shared Cloudflare edge, attribution of the underlying actor is limited to the registration details. Defenders should continue to block the domain at perimeter filters, monitor for any resurgence of the same host name or IP address, and consider adding the IP 104.21.16.1 to reputation lists. Ongoing observation of the registrar and nameserver configuration is recommended, as changes may indicate re‑use of the infrastructure for future campaigns.
Security Signals
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive