comtexy[.]cyou

Analysis indicates that comtexy.cyou was registered on 25 March 2026 through Gname.com Pte. Ltd. and is currently hosted behind Cloudflare, as shown by the authoritative name servers amy.ns.cloudflare.com and cleo.ns.cloudflare.com and the A record pointing to 104.21.48.230. The domain is classified as a generic phishing threat and remains active as of 17 July 2026. The recent creation date and reliance on a shared CDN suggest the operator may be leveraging Cloudflare’s infrastructure to hide the true origin and to enable rapid deployment of phishing pages. No public malware detections have been reported for the domain, but the absence of detections does not constitute evidence of benign intent. The content of the site has not been examined, so the specific lure, credential‑stealing mechanisms, or targeted brands remain unknown. Defenders should treat the domain as malicious until further analysis confirms otherwise. Recommended actions include adding comtexy.cyou to URL filtering and DNS block lists, monitoring for any outbound connections to the IP address 104.21.48.230, and collecting network traffic for potential command‑and‑control or data exfiltration patterns. Continuous re‑assessment is advised as additional intelligence becomes available.