h58sugnrnd[.]wggts9hcj6eatbyfy[.]net

The domain h58sugnrnd.wggts9hcj6eatbyfy.net was registered on March 23, 2026 through Tucows Domains Inc. and resolves to the Cloudflare‑managed address 104.21.60.25, which is geolocated to Canada. The site is protected by Cloudflare, presents an SSL certificate issued by Google Trust Services (WE1), and serves content over HTTP/3. A page title of "WGG" is returned, while the HTTP response code is 403, indicating that direct access is being denied. Technical fingerprints show the presence of Vue.js, suggesting a modern JavaScript framework, and the infrastructure is typical of many abuse‑hosting services that leverage Cloudflare for anonymity. The domain appears on one public blocklist and is actively blocked by PhishDestroy. Reputation scoring from Gridinsoft rates the domain at 43 / 100, and VirusTotal reports a single detection out of 94 scanning engines, reinforcing a high‑risk profile. The threat type is classified as generic_phishing, and the risk level is marked high. While the exact phishing payload or targeted brand has not been disclosed, the combination of recent registration, Cloudflare obscuration, a non‑standard page title, and a detection by a security vendor suggests a deliberate malicious campaign. Defenders should add the domain to deny‑list rules, monitor DNS queries for the associated IP address, and consider proactive blocking at the network perimeter. Continuous re‑evaluation is advised, as the site remains active and could evolve its payload or targeting.