allegrolokalnie[.]prywaztni35815821[.]cfd

Allegrolokalnie.prywaztni35815821.cfd was registered on 23 November 2025 through Web Commerce Communications Limited. The domain resolves to 188.114.96.3, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. DNS resolution points to Cloudflare nameservers jean.ns.cloudflare.com and peyton.ns.cloudflare.com. The site is currently offline, and its hosting infrastructure appears to have been taken down. Threat intelligence flags the domain as a generic phishing site.

It appears on a single security blocklist and is explicitly blocked by PhishDestroy. VirusTotal analysis shows that 19 of 93 scanned security vendors flagged the domain as malicious. The SSL certificate presented is identified as “WE1”. Gridinsoft assigns a trust score of 0 out of 100, indicating an extremely low reputation. No additional evidence such as page title, brand targeting, or kit attribution is available in the current dataset.

The combination of a recent registration date, Cloudflare‑hosted IP, low trust score, and multiple vendor detections suggests a deliberate attempt to host phishing content, likely leveraging the anonymity of the Cloudflare network. However, the offline status prevents direct observation of the payload, and the limited blocklist presence means broader detection may be incomplete. Defenders should continue to block the domain at perimeter and DNS filtering solutions, monitor for any re‑activation of the host, and add the domain to internal blacklist feeds. Additional scrutiny of traffic to 188.114.96.3 is recommended, as other malicious sites may share the same IP. Ongoing collection of URL and content snapshots, if the site resurfaces, will be necessary to confirm the exact phishing vector and target.