findcrosswords[.]com

The domain findcrosswords.com was registered on June 16, 2026 via the registrar Spaceship, Inc. It is currently hosted on the Cloudflare network, using the authoritative nameservers james.ns.cloudflare.com and magdalena.ns.cloudflare.com, and resolves to the IP address 188.114.96.3. The infrastructure footprint aligns with typical abuse‑hosting patterns, as the address is shared across multiple short‑lived domains that have appeared in phishing investigations. The domain is listed on one public security blocklist and has been actively blocked by the PhishDestroy feed, confirming that threat‑intelligence sources have observed malicious activity associated with the host. VirusTotal records indicate that the domain was submitted for analysis to 95 scanning engines; none of those engines raised a detection at the time of scanning, but the absence of a detection does not constitute a safety guarantee.

No public SSL certificate information, HTTP response codes, or page‑title metadata are currently available, limiting the ability to assess the site’s presentation layer. Consequently, the precise phishing vector—such as credential harvesting, credential‑relay, or credential‑stealing pages—remains unconfirmed. Defenders should continue to treat findcrosswords.com as a hostile indicator. Network‑level controls should block traffic to the IP 188.114.96.3 and to the domain itself.

Email security gateways should add the domain to blocklists and enable URL reputation checks. Continuous monitoring of the associated IP range and Cloudflare nameservers is advised, as the hosting environment may be repurposed for additional malicious campaigns. Incident response teams should collect any email samples that reference findcrosswords.com for further sandbox analysis, and threat‑intel platforms should update attribution records to reflect the ongoing active status of this phishing infrastructure.