mmohammadmfallahm02[.]mmohammadmfallahm02-cloudflare[.]workers[.]dev

The domain mmohammadmfallahm02.mmohammadmfallahm02-cloudflare.workers.dev is associated with an elevated-risk generic phishing threat and is currently offline. The page title appears to impersonate the legitimate Chinese media organization CCTV, suggesting a potential attempt to deceive users by mimicking a trusted source.

Analysis indicates that the domain was registered through Cloudflare, Inc., and was created on April 19, 2026. It resolves to the IP address 104.21.90.207. The domain has been flagged by 15 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion within the security community. The SSL certificate is issued by Google Trust Services with a WE1 designation, which could be used to enhance the credibility of the phishing site. The domain appears on one security blocklist, further corroborating its malicious nature. Despite the SSL certificate, the high number of flags and blocklist appearance suggest that the domain is not to be trusted.

The current status of the domain is offline, which may indicate that the threat has been mitigated or that the operators are temporarily inactive. However, the infrastructure and historical data suggest a persistent threat. Organizations and individuals are advised to remain vigilant and ensure that their security systems are updated to recognize and block this domain. Additionally, users should be educated on the signs of phishing, such as unexpected emails, suspicious links, and impersonated brand logos, to prevent potential compromise. Regular monitoring of network traffic and endpoint security logs is recommended to detect any residual activity related to this domain.