lsfy[.]opaqueshellsoftsmoke[.]click

lsfy.opaqueshellsoftsmoke.click is a subdomain of opaqueshellsoftsmoke.click. PhishDestroy first observed the hostname on Jun 13, 2026. The captured page title is “AMD ׀ together we advance_AI”. Stored page analysis classifies the content as impersonation. Current evidence score: 72/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Spamhaus DBL. VirusTotal recorded 4 detections among 92 engines: ADMINUSLabs, alphaMountain.ai, Fortinet, Gridinsoft on Jul 18, 2026 at 18:45 UTC. Spamhaus DBL: DBL_MALWARE on Jul 13, 2026 at 14:36 UTC. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. Google Safe Browsing returned no flag on Jul 9, 2026 at 00:10 UTC.

HTTP 301 was recorded on Aug 7, 2026 at 22:34 UTC. Registration records for the registrable domain opaqueshellsoftsmoke.click list NAMECHEAP as the registrar and May 17, 2026 as the creation date. Registration preceded first observation by 26 days. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. TLS metadata lists Let's Encrypt / E7 as the certificate issuer with validity through Jul 20, 2026; checked May 17, 2026 at 17:00 UTC.

The content indicators and 2 positive source findings support the current impersonation classification.