cow-d[.]app

The domain cow-d.app is currently flagged as a high-risk phishing threat. Analysis indicates that this domain is actively being used for phishing purposes, as evidenced by its page title stating 'Account Suspended'. It has been blocked by multiple security services, including PhishDestroy, MetaMask, and SEAL. The domain resolves to the IP address 188.114.97.3, which is associated with CloudFlare, Inc. in Canada. It is registered through OwnRegistrar Inc. and is currently active. The HTTP status returned is 302, often indicating a redirection typical of phishing schemes. Additionally, the domain has been identified in two threat intelligence pulses on AlienVault OTX and appears on three separate security blocklists. The SSL certificate is issued by Google Trust Services, which does not mitigate the phishing risk. VirusTotal scans show that 3 out of 91 security vendors have flagged this domain, reinforcing its classification as a threat. Defenders should proactively block this domain and monitor for any related phishing attempts, as the infrastructure is still operational.