nmbskl[.]uesbnb[.]com

Analysis of the domain nmbskl.uesbnb.com indicates it was actively flagged as a crypto scam prior to being taken offline. The domain was registered on March 12, 2026, through Dominet (HK) Limited, and resolved to the IP address 104.21.56.185, hosted on Cloudflare's infrastructure (AS13335). The page title, 'Attention Required! | Cloudflare,' suggests an attempt to mimic a Cloudflare security challenge, a common tactic to lend false legitimacy or obscure malicious intent.

At the time of assessment, the domain appeared on one security blocklist, and three of 94 security vendors on VirusTotal flagged it as malicious. The SSL certificate was issued by Let's Encrypt (serial number E7), a detail that does not inherently indicate compromise but is consistent with short-lived phishing domains. Nameservers were courtney.ns.cloudflare.com and james.ns.cloudflare.com, further confirming Cloudflare as the hosting provider.

The domain's current status is offline, though this does not preclude future reactivation under the same or altered infrastructure. Defenders should treat this domain as a confirmed crypto scam threat, block it at the DNS and proxy levels, and monitor for related indicators such as the IP address 104.21.56.185 or associated Cloudflare nameservers. The exact content of the scam page remains unanalyzed, but the classification as a crypto scam aligns with known patterns of fraudulent investment or wallet-draining schemes.