cambria-lobby[.]xyz

Analysis of cambria-lobby.xyz, created on 21 February 2026 and currently offline, shows that the domain resolves to 188.114.96.3, an IP address owned by AS13335 Cloudflare, Inc. in the United States. The site was served behind Cloudflare’s edge network, with HTTP/3 enabled and a Google Trust Services / WE1 TLS certificate. The page title returned by the server is "Suspected phishing site | Cloudflare", which directly labels the content as phishing. VirusTotal records indicate that three of ninety‑three security vendors flagged the domain, providing independent confirmation of malicious intent.

The registrar listed is NameSilo, LLC, and the authoritative nameservers are vick.ns.cloudflare.com and adi.ns.cloudflare.com. A Gridinsoft trust score of 0 out of 100 further underscores the lack of credibility. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service.

No additional public intelligence such as Safe Browsing or OTX entries is available, and the site’s content beyond the title has not been captured. Defenders should continue to block the domain at perimeter and DNS layers, monitor the associated IP address for any future re‑use, and update threat‑intel feeds with the observed indicators. Because the site is already offline, remediation focuses on preventing re‑registration and ensuring that any residual references in phishing‑email campaigns are flagged for removal.