moodeng[.]allocated[.]live

Analysis of moodeng.allocated.live shows a newly registered domain created on 21 February 2026 that resolves to the Cloudflare‑managed address 172.67.221.191, located in the United States under ASN 13335. The HTTP response delivers a page with the title “Just a moment…”, indicating the site is presenting a generic waiting screen rather than a functional landing page. The domain is currently taken offline, but historical data indicate it was flagged by multiple detection services. PhishDestroy and ScamSniffer have added the domain to their blocklists, and it appears on two additional security blocklists, reflecting a consensus among threat‑intel sources that the site was being used for malicious purposes.

The SSL certificate presented is identified as “WE1”, a certificate commonly observed on compromised or malicious sites hosted behind Cloudflare’s reverse‑proxy service. Gridinsoft assigns the domain a trust score of 0 out of 100, the lowest possible rating, reinforcing the suspicion of abuse. VirusTotal scanned the domain and reported three positive detections out of ninety‑three security vendors, confirming that at least a subset of industry scanners recognized malicious characteristics.

No further information on registrar, brand targeting, or specific phishing kit is available. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑use of the underlying IP address, and update internal threat‑intel feeds with the observed indicators, including the IP, SSL fingerprint, and blocklist entries. Ongoing vigilance is advised given the rapid creation date and the involvement of multiple reputable anti‑phishing platforms.