cldskh[.]com

Analysis indicates that www.cldskh.com was registered on July 08 2026 through Dominet (HK) Limited and is currently hosted on Cloudflare infrastructure, using the nameservers hadlee.ns.cloudflare.com and ricardo.ns.cloudflare.com. DNS resolution points to the IP address 172.67.175.190, which is part of Cloudflare’s edge network. The domain is classified as a generic phishing site, but no specific target brand or payload has been identified in the available intelligence. The short registration window and immediate activation suggest a likely use for credential harvesting or malicious redirects. At present, there is no publicly available content analysis, sandbox execution, or malware detection data for the site, leaving the exact attack vector and victim profile uncertain. Defenders should add the domain to block lists at the perimeter and endpoint layers, monitor DNS queries for lookups to 172.67.175.190, and alert SOC personnel to any outbound connections from internal hosts. Continuous threat‑intel feeds should be consulted for future indicators of compromise associated with this Cloudflare‑hosted address, and any suspicious traffic should be captured for deeper forensic examination.