coow[.]fi

This domain, coow.fi, was registered on 18 June 2026 through Key‑Systems GmbH and resolves to the Cloudflare‑hosted address 104.21.17.252 (AS13335, United States). The site returns an HTTP 301 redirect and presents the page title “Vercel Security Checkpoint”. The SSL certificate is issued by Google Trust Services under the WE1 designation, indicating a valid TLS handshake. Infrastructure analysis shows the use of Cloudflare services, including Browser Insights and HTTP/3, and the authoritative nameservers are dakota.ns.cloudflare.com and evelyn.ns.cloudflare.com. Threat intelligence cites three independent blocklists that have listed coow.fi, and it is actively blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX references the domain in fourteen separate pulses, reinforcing its reputation as malicious. VirusTotal reports three detections out of ninety‑one scanners, confirming that a minority of security products have identified malicious behavior. The Gridinsoft trust score is 0 / 100, further indicating a lack of credibility. While the page title suggests a generic security checkpoint, no additional content has been captured, leaving the exact phishing payload or targeted brand undetermined. Defenders should treat coow.fi as a high‑risk generic phishing infrastructure. Immediate actions include adding the domain to network and endpoint blocklists, monitoring DNS queries for the resolved IP, and employing sink‑hole techniques to disrupt potential command‑and‑control traffic. Continuous observation of any new detections or changes in hosting configuration is advised.