molt-ai[.]xyz

The domain molt-ai.xyz was registered through NameSilo, LLC on 27 February 2026, giving it an age of just over five months at the time of analysis. DNS resolution points exclusively to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. Authoritative nameservers are elaine.ns.cloudflare.com and owen.ns.cloudflare.com, confirming that the domain is hosted on Cloudflare’s network. No TLS certificate is presented, meaning the site is reachable only via HTTP and lacks the encryption and trust signals typically expected for legitimate services. An HTTP request returns the page title "Just a moment...", and the site is currently listed as offline as of 22 July 2026.

The domain appears on three public blocklists and is actively blocked by the security products PhishDestroy, MetaMask, and SEAL. VirusTotal scanning recorded three detections out of ninety‑three scanners, indicating that a minority of AV engines have identified malicious behavior associated with the domain. No additional payload, URL path, or content details have been published, so the precise phishing vector or targeted brand remains unknown.

Given the limited but concrete indicators, defenders should treat molt‑ai.xyz as a high‑confidence malicious indicator. Recommended actions include adding the domain and its resolving IP (188.114.96.3) to DNS blocklists or sinkhole configurations, monitoring Cloudflare‑hosted address ranges for similar activity, and continuously querying VirusTotal and other threat‑intel feeds for any new detections. The lack of SSL and the recent registration date suggest a short‑lived infrastructure, but the presence on multiple blocklists warrants continued vigilance until the domain is definitively retired.