lebovskimeinkun[.]com

Analysis of lebovskimeinkun.com indicates that the domain is currently offline, returning an HTTP 404 status with the page title "Error." The domain was registered on August 12, 2025 through the registrar MAT BAO CORPORATION and is delegated to the Cloudflare nameservers fatima.ns.cloudflare.com and thaddeus.ns.cloudflare.com. DNS resolution points to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site serves an SSL certificate issued by Google Trust Services under the WE1 label, confirming that transport encryption is in place despite the site’s inactive state. Cloudflare services visible include Browser Insights and HTTP/3 support, suggesting the infrastructure is fully provisioned for a legitimate‑looking web presence.

Threat intelligence signals include placement on a single security blocklist and an explicit block by the PhishDestroy service. VirusTotal records show that nine of ninety‑five scanned security vendors flagged the domain, reinforcing the suspicion of malicious intent. Additionally, AlienVault OTX lists the domain in sixteen distinct threat‑intel pulses, indicating that it has been observed across multiple monitoring platforms.

While the HTTP 404 response prevents direct observation of phishing content, the convergence of registration details, hosting configuration, detection counts, and blocklist presence provides sufficient evidence to classify the domain as a confirmed phishing site. Uncertainties remain regarding the exact phishing payload or credential‑harvesting page, as no content was captured before the site went offline.

Defenders are advised to add lebovskimeinkun.com to network deny lists, enforce DNS sinkholing for the domain, and monitor for any future resolution changes that might indicate re‑activation under a different IP address.