cake[.]5degrees[.]io

Analysis of the domain cake.5degrees.io, observed on July 24, 2026, confirms its classification as a generic phishing site. The domain was registered on February 21, 2026 through GoDaddy.com, LLC and is hosted on the IP address 47.79.65.156, which resolves to a server located in Hong Kong under ASN 45102, identified as Alibaba (US) Technology Co., Ltd. The site presented an HTTP 404 response at the time of observation and is currently marked as taken offline. The SSL certificate in use is issued by DigiCert, Inc. via RapidSSL Global TLS RSA4096 SHA256 2022 CA1, indicating a valid TLS configuration despite the malicious activity. Infrastructure indicators include the use of GoDaddy's default nameservers ns25.domaincontrol.com and ns26.domaincontrol.com.

Reputation metrics show a Gridinsoft trust score of 0 out of 100 and inclusion on two external security blocklists. The domain is actively blocked by PhishDestroy and ScamSniffer, reinforcing its malicious status. VirusTotal analysis recorded 15 detections out of 93 scanning engines, providing additional corroboration of phishing behavior.

The page title returned by the server matches the domain name, and no further content was retrieved before the site went offline, leaving the exact phishing payload unknown. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any reappearance of the underlying IP or associated ASN, and update threat intelligence feeds with the observed indicators, including the registrar, nameservers, SSL issuer, and detection counts. Ongoing surveillance is advised to capture any future reactivation or related infrastructure that may be leveraged for similar campaigns.