ae[.]ae365123[.]com

The domain ae.ae365123.com was registered on March 23, 2026 through Realtime Register B.V. and is presently classified as active. Intelligence sources have identified the site as a brand‑impersonation operation targeting Cloudflare, with the page title explicitly stating “Suspected Misleading Website | Cloudflare.”

Infrastructure analysis shows the domain resolves to IP address 188.114.97.3, which belongs to Cloudflare, Inc. in Canada. The host returns an HTTP 403 response and presents a valid Let's Encrypt certificate (issuer E8). Authoritative nameservers are chuck.ns.cloudflare.com and summer.ns.cloudflare.com, indicating the domain is hosted within Cloudflare's DNS infrastructure. The Gridinsoft trust score of 0 out of 100 further corroborates the malicious nature of the host.

Threat indicators include a VirusTotal rating where 4 of 95 scanning engines flagged the domain as malicious, and placement on at least one security blocklist, specifically PhishDestroy. The scam type is recorded as “Fake Exchange,” suggesting attempts to lure victims into fraudulent financial transactions. The page title and brand‑impersonation label provide concrete evidence that the actor is deliberately misrepresenting Cloudflare to deceive users.

Defenders should immediately block ae.ae365123.com at the DNS and proxy layers, monitor for any outbound connections to the associated IP, and enforce strict email filtering for messages referencing the domain. Continuous threat‑intel feeds should be consulted for updates, and any detected attempts to interact with the site should be logged and investigated as potential credential‑theft or financial‑fraud incidents.