afsivhubcloud[.]digital

Analysis dated July 25 2026 flags the domain afsivhubcloud.digital as a brand‑impersonation infrastructure targeting the cryptocurrency platform Sei. The domain was registered on 23 February 2026 and is hosted on Cloudflare’s network (IP 188.114.97.3, AS13335, United States). No TLS certificate is presented, indicating HTTP‑only service at the time of observation. The authoritative name servers are bethany.ns.cloudflare.com and derek.ns.cloudflare.com, both belonging to Cloudflare’s managed DNS service. Public threat‑intel feeds have listed the host on a single security blocklist; PhishDestroy actively blocks the domain.

VirusTotal scans returned a single positive detection out of 93 scanned security vendors, confirming that at least one vendor identified malicious behavior. The page title returned by the HTTP response was “Startseite ‑ afsivhubcloud.digital”, which does not reference the targeted brand but confirms that a web service was reachable before the site was taken offline. Current telemetry shows the domain is offline, suggesting the operators have withdrawn the site or are temporarily suspending activity. No SSL certificate, no additional page content, and no evidence of other associated infrastructure (e.g., secondary domains, command‑and‑control servers) have been observed, leaving the full scope of the campaign uncertain.

Defenders should add afsivhubcloud.digital to internal blocklists and monitor for any resurgence of the same host name or its Cloudflare IP range. Network sensors should flag HTTP requests to 188.114.97.3 and any future DNS queries for the domain. Continuous review of Cloudflare‑hosted domains that impersonate Sei is recommended, as the infrastructure can be rapidly re‑deployed under new sub‑domains. Organizations using Sei services should remain vigilant for credential‑phishing attempts that reference the brand, even though the exact phishing page content has not been disclosed.