3658yohu5200[.]cc

The domain 3658yohu5200.cc was registered on June 12, 2026 through the registrar DYNADOT LLC and remains active as of the report date, July 22, 2026. It is delegated to the Cloudflare nameservers dalary.ns.cloudflare.com and jacob.ns.cloudflare.com, a common pattern for fast‑flux or abused hosting infrastructures. DNS resolution points to the public IP address 40.81.18.27, a cloud‑provider block that can host a wide range of legitimate and malicious services, reducing the usefulness of IP‑based reputation alone. The domain appears on two reputable phishing blocklists, PhishDestroy and OpenPhish, indicating that at least two independent abuse‑feed operators have observed malicious activity tied to the name.

VirusTotal analysis shows that 12 of 95 scanned security vendors flag the domain, providing additional independent corroboration of risk. No public page title, SSL certificate details, or HTTP response codes are currently available, leaving the exact landing‑page content and transport‑layer security unknown. Likewise, no Open Threat Exchange (OTX) indicators or Safe Browsing status have been published for this name.

Given the recent creation date, active status, presence on dedicated phishing blocklists, and multi‑vendor detections, defenders should treat 3658yohu5200.cc as high‑risk. Recommended actions include adding the domain to DNS‑based blocklists, configuring web‑proxy or firewall rules to deny outbound connections, and monitoring DNS query logs for any resolution attempts. Continuous re‑evaluation is advised should additional evidence such as page content, SSL fingerprints, or threat‑intel feeds become available.