loserrq0j1sha8[.]com

This report examines loserrq0j1sha8.com for signs of phishing risk as of July 19, 2026. The domain is currently active and has been classified as a high-risk phishing threat based on multiple indicators. It is blocked by PhishDestroy and is listed on at least one established security blocklist, reflecting ongoing concerns in the threat intelligence community. VirusTotal data confirms that 19 of 91 vendors have flagged the domain as malicious, suggesting widespread consensus on its threat nature. Infrastructure analysis shows hosting via CloudFlare, Inc. in Canada, with nameservers registered through hans.ns.cloudflare.com and oaklyn.ns.cloudflare.com. The SSL certificate is issued by Let's Encrypt, offering basic encryption but not assurance of legitimacy. Registration was processed through CNOBIN INFORMATION TECHNOLOGY LIMITED, a provider sometimes associated with domains flagged for abuse. The domain resolves to IP address 188.114.97.3. AlienVault OTX data further substantiates its risk profile, as it has been referenced in six distinct threat intelligence pulses. Although these findings strongly indicate phishing activity, the exact content or brand targeting of the domain has not yet been analyzed. The combination of active status, blacklist presence, significant VirusTotal detections, and multiple threat intelligence mentions demonstrates persistent risk. Defenders are advised to block this domain and monitor related infrastructure for similar abuse, as current evidence strongly supports its classification as a phishing platform.