echo-rift-summit[.]sheissecloud[.]top

On 24 July 2026, the domain echo-rift-summit.sheissecloud.top was observed hosting a site whose HTML title reports "Lilith Storage · 文件管理系统". The domain was registered on 6 March 2026 through NameSilo, LLC and is delegated to Cloudflare name servers hal.ns.cloudflare.com and paityn.ns.cloudflare.com. DNS resolution points to the address 103.152.220.152, which belongs to AS138997 (Eons Data Communications Limited) and is geolocated in Hong Kong. No TLS certificate is presented; the site served HTTP only, indicating the absence of transport‑layer encryption. The page has been flagged by multiple defensive products: one of ninety‑four VirusTotal scanners raised a detection, and three independent blocklists—PhishDestroy, MetaMask, and SEAL—have listed the domain.

The domain currently appears on three public security blocklists, confirming that it has been recognized as malicious by the community. The site is presently taken offline, and no further HTTP response data are available. Analysis indicates that the domain is being used to impersonate a file‑storage service, as suggested by the page title. No additional evidence such as login forms, credential‑harvesting parameters, or malicious payloads has been released, so the exact phishing vector remains unclear.

The lack of SSL and the reliance on a Cloudflare DNS front end are typical of short‑lived phishing infrastructure. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and correlate any inbound traffic to the associated IP address with known malicious activity. Further investigation of the IP owner, Eons Data Communications Limited, may reveal other related domains. Because the site is offline, any ongoing campaigns are likely paused, but threat actors could reactivate the domain or clone the content on a new host, so continuous watchlist updates are advised.