resilient-humility[.]fontmaxplugin[.]cc

Analysis indicates that the domain resilient-humility.fontmaxplugin.cc was registered on 2025-11-02 through NiceNIC International Group Co., Limited and is hosted behind Cloudflare (ASN 13335). DNS resolves to IP 188.114.96.3, which geolocates to the United States. The domain presents a valid SSL certificate issued by Google Trust Services under the WE1 intermediate, confirming TLS termination at the Cloudflare edge. HTTP probing returned a 403 status and the page title "404 Not Found", suggesting the site is no longer serving content; the current status is recorded as offline.

VirusTotal has recorded detections from five of ninety‑five participating scanners, indicating that multiple security products have flagged the host as malicious. The domain appears on a single public blocklist and is listed as blocked by the PhishDestroy feed. Additional reputation data shows a Gridinsoft trust score of 0 out of 100, reinforcing the malicious classification.

Detected technologies include Cloudflare Browser Insights, Cloudflare service itself, and support for HTTP/3, all typical of infrastructure used to hide phishing operations. Defenders should add the hostname and its resolving IP to firewall and DNS filtering rules, monitor outbound traffic for connections to 188.114.96.3, and ensure that any email or web gateway security solutions reference the PhishDestroy and other blocklist feeds that already flag this domain. Continuous re‑evaluation is advised in case the site returns to an active state.