8bezt5[.]cn

Analysis of the domain 8bezt5.cn as of 20 July 2026 indicates that it continues to host a generic phishing campaign. DNS resolution points to the Cloudflare‑managed address 104.21.13.27, which is geolocated to California, United States, and is associated with the Cloudflare, Inc. network. The site presents an HTTP 301 redirect and serves an SSL certificate issued by Google Trust Services under the WE1 intermediate, confirming the use of a valid TLS chain. The domain is currently listed on one external blocklist and has been actively blocked by the PhishDestroy filtering service. VirusTotal records show that the host has been scanned by 91 security vendors, none of which have raised a detection at the time of analysis; this lack of detections does not constitute evidence of benign behavior. The available intelligence does not include page content, registration details, or observed victim reports, leaving the full scope of the phishing payload uncertain. Defenders should continue to block 8bezt5.cn at network perimeter devices, update DNS sinkhole entries, and monitor for any future changes in detection status or additional malicious indicators associated with the IP address or certificate. Ongoing observation is recommended to capture any evolution of the campaign.