continue[.]business-minagne[.]com

This domain, continue.business-minagne.com, is flagged as a fake login phishing site designed to harvest user credentials. Analysis indicates no direct association with a specific brand impersonation or crypto drainer kit, though the infrastructure aligns with credential theft campaigns. The page title, 'Suspected phishing site | Cloudflare,' suggests automated detection by the hosting provider, but no explicit phishing kit signatures were identified in initial scans. The domain appears to target generic login portals, a common tactic for broad-spectrum credential harvesting. Infrastructure analysis reveals concrete technical indicators of compromise. The domain was registered on February 24, 2026, through Aceville Pte. Ltd., a registrar frequently exploited for malicious registrations. It resolves to the IP address 104.21.24.100, hosted on AS13335 (Cloudflare, Inc.), a network often leveraged to obfuscate origin servers. VirusTotal reports 22 out of 95 security vendors flagging the domain as malicious, while Google Safe Browsing (GSB) status remains unconfirmed. The domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services (WE1), a legitimate but commonly abused certificate authority in phishing operations. The domain is currently offline, mitigating immediate user exposure. However, residual risk persists due to the domain's recent registration and the registrar's history of abuse. Cloudflare's automated suspension suggests proactive detection, but threat actors may re-deploy the domain or migrate to a new infrastructure. Users are advised to verify login portals via official sources, monitor for unauthorized account access, and report any suspicious activity to their security teams. Organizations should block the domain and IP at the network level and conduct retrospective log analysis for connections to 104.21.24.100.