salipro[.]work

Analysis of salipro.work indicates that the domain was registered through Namecheap Inc on April 15 2026 and is currently taken offline. The authoritative nameservers natasha.ns.cloudflare.com and porter.ns.cloudflare.com resolve the domain to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. and is geolocated to Canada. The site presented a HTTP response with the page title “Not Found,” suggesting that the host is serving a generic error page rather than a legitimate landing page. The SSL certificate presented is issued by Google Trust Services under the WE1 intermediate, confirming that TLS termination is performed by Cloudflare’s edge network. Reputation data shows that the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service.

Independent scanning on VirusTotal returned 11 detections out of 94 scanners, reinforcing the malicious classification. The Gridinsoft trust score is 0 out of 100, indicating a lack of trustworthiness. The identified scam type is credential phishing, consistent with the “generic phishing” threat label. Taken together, the infrastructure—Cloudflare front‑end, low‑trust registrar, and a recent creation date—matches patterns commonly observed in credential‑phishing campaigns that leverage reputable CDNs to hide origin.

The presence of a “Not Found” page title does not provide additional context about the phishing payload, and no further content analysis is available because the site is offline. Defenders should continue to block traffic to salipro.work at perimeter and DNS layers, monitor for any future re‑hosting of the domain, and add the domain to internal threat‑intel feeds. Organizations receiving phishing reports referencing salipro.work should treat any credentials submitted to the domain as compromised and advise affected users to reset passwords.