3658yohu8200[.]cc

The domain 3658yohu8200.cc was registered on June 12, 2026 through Dynadot Inc and is currently active. DNS resolution is handled by the Cloudflare nameservers dalary.ns.cloudflare.com and jacob.ns.cloudflare.com, and the domain resolves to the IPv4 address 40.81.18.27. Threat intelligence indicates that the domain is associated with a generic phishing campaign, as evidenced by its inclusion on a security blocklist and a specific block by PhishDestroy. VirusTotal analysis shows that 17 of 95 scanning engines have flagged the domain as malicious, reinforcing the suspicion of malicious intent. Apart from the blocklist entry, the domain appears on only one additional security blocklist, suggesting limited exposure in public blocklist feeds. No public information is available regarding SSL certificate details, HTTP response codes, Safe Browsing status, Open Threat Exchange references, trust‑score metrics, or the page title presented by the site. Consequently, the exact content and target brand of the phishing lure remain unknown. Defenders should proactively deny any network traffic to 3658yohu8200.cc and its resolved IP address, add the domain and IP to local and upstream DNS blocklists, and monitor for any DNS queries or outbound connections to the host. Continuous re‑scanning with multi‑engine services is advised to capture any changes in detection scores, and any future evidence such as page titles or SSL fingerprints should be incorporated into indicator sets to improve detection fidelity.