tasty-changer[.]com

Analysis of tasty-changer.com shows the domain is actively used for phishing despite a lack of malware detections in public scanning services. The domain resolves to the IP address 5.254.28.33 and was created on February 08, 2024. Registration is handled through Cloudflare, Inc., with authoritative nameservers dexter.ns.cloudflare.com and marge.ns.cloudflare.com, indicating the use of Cloudflare’s anonymizing registration service. VirusTotal records indicate the domain has been scanned by 91 vendors, none of which reported a detection, but this absence of alerts does not constitute a safety assurance.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one reputable threat‑intelligence feed has classified it as malicious. No additional public intelligence such as Safe Browsing status, Open Threat Exchange (OTX) references, SSL certificate details, HTTP response codes, or page‑title information is currently available, limiting the depth of technical profiling. Defenders should treat the domain as a confirmed phishing indicator and enforce network‑level blocks for both the domain name and its resolved IP address.

Monitoring for any new resolutions or changes in the Cloudflare nameserver configuration is advisable, as threat actors may shift hosting infrastructure. Continuous re‑scanning with multi‑vendor engines is recommended to capture any future payloads or malicious content that may be introduced. Organizations should also consider sharing observed traffic with collaborative blocklist services to improve collective detection and response capabilities.