midlnight[.]network
Phishing and security check for midlnight.network
As of July 23, 2026, the domain midlnight.network is flagged as a generic phishing site. The domain is currently offline, with an HTTP status code of 403, indicating that access to the site is forbidden. Infrastructure analysis reveals that the domain uses Cloudflare, a common choice for web applications and websites requiring DDoS protection and content delivery. The nameservers for the domain are frida.ns.cloudflare.com and piers.ns.cloudflare.com, both managed by Cloudflare, Inc. The domain resolves to the IP address 172.67.158.2, which is located in the United States and belongs to AS13335, operated by Cloudflare, Inc. This suggests the domain was hosted behind Cloudflare’s infrastructure, which can be used to obscure the true server location and enhance security and performance.
The SSL certificate for the domain is issued by Google Trust Services, further indicating a level of security and authenticity, although this does not guarantee the legitimacy of the site’s content. The domain appears on one security blocklist, and PhishDestroy has blocked it, adding to the evidence of its malicious nature. According to VirusTotal, 16 out of 95 security vendors have flagged this domain as potentially harmful, which is a significant number and warrants attention. While the exact content of the site has not been analyzed, the elevated risk level and the presence of multiple security flags suggest that the domain should be treated with caution.
Defenders should ensure that network policies block access to this domain and monitor for any related activities or attempts to bring the site back online. Additionally, it is recommended to implement DNS filtering and educate users about the risks of interacting with flagged domains. Since the domain is currently offline, there is no immediate risk, but regular checks should be conducted to verify its status and detect any changes in its configuration or content.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 1 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comVirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of midlnight.network · checked Apr 23, 2026
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive