goehoq[.]uesbnb[.]com

This domain, goehoq.uesbnb.com, is currently flagged as an active generic_phishing threat targeting Cloudflare infrastructure. Analysis indicates the domain is designed to impersonate Cloudflare's authentication pages, as evidenced by the page title 'Attention Required! | Cloudflare' and the use of legitimate Cloudflare services for obfuscation. The domain remains operational and poses an elevated risk to users who may be deceived into submitting credentials or sensitive information. Infrastructure analysis reveals the domain was registered on March 12, 2026, through Dominet (HK) Limited, a registrar historically associated with high-risk domains. It resolves to the IP address 172.67.155.73, which is part of Cloudflare's network, further complicating detection efforts. The domain appears on one security blocklist and is flagged by 2 of 95 security vendors on VirusTotal, indicating limited but growing detection. Technologies detected include Cloudflare Browser Insights and HTTP/3, suggesting the threat actor is leveraging modern web protocols to evade traditional security measures. The domain's current status is active, and its risk level is classified as elevated due to the combination of Cloudflare impersonation, low detection rates, and the use of legitimate CDN infrastructure. Organizations are advised to block the domain and its associated IP (172.67.155.73) at the network perimeter. Endpoint protection solutions should be updated to include this domain in phishing detection rules. Users should be educated to recognize the 'Attention Required! | Cloudflare' page title as a potential indicator of compromise. Monitoring for similar domains registered through Dominet (HK) Limited or resolving to Cloudflare IPs may help identify related threats.