msdouble[.]io

The domain msdouble.io was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IP address 172.67.187.199, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The site presented a page title identical to the domain name, "msdouble.io," and was observed to serve an SSL certificate identified as WE1.

Independent threat intelligence sources have placed the domain on at least one security blocklist, and it is specifically listed by PhishDestroy as a blocked entity. VirusTotal analysis recorded detections from two of ninety‑three scanning engines, indicating that at least a minority of security vendors recognized malicious characteristics. No additional context such as a targeted brand, specific phishing kit, or content snapshot is available from the provided data, leaving the precise lure or victim profile uncertain.

The combination of a recent registration, Cloudflare hosting, a valid TLS certificate, and blocklist inclusion is consistent with infrastructure commonly leveraged for short‑lived phishing campaigns. Defenders should add msdouble.io to local deny lists, monitor outbound DNS queries for the associated IP range, and consider extending blocklist coverage to encompass the entire Cloudflare AS13335 block to pre‑empt similar future deployments. Continuous re‑scanning of the domain on VirusTotal or similar aggregators is advised to capture any evolving detection signatures.