cp-intermedia-controlpanel-login-webmail[.]babysuites[.]net

Analysis of the domain cp-intermedia-controlpanel-login-webmail.babysuites.net indicates a high-risk credential phishing campaign impersonating Network Solutions. The domain was registered through Network Solutions, LLC on March 11, 2011, and currently resolves to IP 188.114.97.3, hosted on Cloudflare's infrastructure (AS13335). The SSL certificate is issued by Google Trust Services, and the domain uses Cloudflare nameservers (aliza.ns.cloudflare.com and rick.ns.cloudflare.com). As of July 24, 2026, the domain returns an HTTP 500 status, suggesting it may be temporarily offline or misconfigured. Security vendors have flagged this domain, with 24 of 95 detection engines on VirusTotal identifying it as malicious.

It is blocked by PhishDestroy and appears on at least one security blocklist. Google Safe Browsing classifies the domain under social engineering, and Scamadviser assigns it a trust score of 1 out of 100. The page title, 'Sign in - Professional Email,' aligns with credential harvesting tactics targeting business email accounts. Defenders should treat this domain as a confirmed phishing threat.

The combination of brand impersonation, low trust scores, and detection by multiple security vendors warrants immediate blocking at the network and endpoint levels. The use of Cloudflare infrastructure may complicate takedown efforts, but the domain's current offline status suggests possible mitigation. Further monitoring is recommended to track potential reactivation or shifts in hosting. No evidence of a phishing kit or additional payload delivery is present in the available data, but the domain's historical registration date does not preclude recent malicious repurposing.