v42095[.]cc

The domain v42095.cc was registered on April 22 2026 through NameSilo, LLC and currently resolves to the IPv4 address 23.224.199.226. The host resides in the United States and is associated with the CloudRadium L.L.C infrastructure. HTTP requests to the host return a 200 status code, indicating an active web service. The domain is served through Cloudflare's DNS, using the nameservers christian.ns.cloudflare.com and meilani.ns.cloudflare.com. Multiple threat‑intelligence sources have flagged the domain. AlienVault OTX lists the domain in a single pulse, and six of ninety‑five security vendors on VirusTotal have marked it as malicious. The site appears on three external blocklists and is already blocked by the PhishDestroy, MetaMask, and SEAL filtering engines. The SSL certificate presented is an ECC DV certificate issued by ZeroSSL GmbH, which is typical for fast‑deployed malicious sites. The infrastructure pattern aligns with recent phishing campaigns that leverage short‑lived domains and cloud‑based DNS. The use of Cloudflare nameservers masks the true origin of the web server while providing a legitimate‑looking TLS handshake. The zero trust score from Gridinsoft (0/100) reinforces the likelihood of malicious intent. No additional indicators such as known phishing kits or compromised credentials have been publicly disclosed, leaving the exact payload or targeted brand ambiguous. Defenders should prioritize immediate containment of v42095.cc by adding the domain and its resolving IP address to network deny lists. Monitoring of DNS queries for the associated Cloudflare nameservers can reveal related domains that reuse the same infrastructure. Given the active HTTP response and low trust rating, any email or web traffic that references this domain should be treated as hostile and blocked. Continuous re‑evaluation is advised, as threat actors may reuse the same hosting environment for future campaigns.