losaqweasas[.]cloudaccess[.]host

Analysis of losaqweasas.cloudaccess.host, flagged as a phishing site, shows that the domain resolves to IP 104.37.86.70, which is owned by CloudAccess.net, LLC (AS54456) and located in the United States. The domain was registered on 22 December 2014 through eNom, Inc. and uses the authoritative nameservers ns1.gridfast.net and ns2.gridfast.net. The hosted site presents the page title “Your WordPress! Site hosted with CloudAccess.net,” indicating that the content was likely served from a default WordPress installation provided by the hosting provider. No TLS certificate is presented, meaning the site was reachable only over HTTP, which is consistent with many phishing deployments that avoid encryption to simplify content injection.

The domain is currently taken offline, as confirmed by the latest status check, but historical threat intelligence indicates active abuse. Twelve of ninety‑five VirusTotal scanners flagged the domain as malicious, and it appears on a single security blocklist. PhishDestroy has also listed the domain as a phishing source. Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low reputation. Because the site is no longer reachable, the specific payload or credential‑harvesting mechanism cannot be verified at this time.

The lack of an SSL certificate, combined with the generic WordPress title, suggests the page may have been a simple credential‑capture form or a redirect to another malicious host, but no definitive page content is available for analysis. Defenders should continue to block 104.37.86.70 at the network perimeter and add losaqweasas.cloudaccess.host to URL filtering policies. Monitoring for any re‑registration of the domain or for similar subdomains under the cloudaccess.host zone is advisable. Security teams should also consider adding the associated IP range to threat‑intel feeds, given its association with prior phishing activity.