114514meme[.]click

Analysis of 114514meme.click shows a short‑lived infrastructure that was active in early 2026 and has since been taken offline. The domain was registered on February 21, 2026 through Global Domain Group LLC and is hosted behind Cloudflare’s network (AS13335, United States). DNS resolution points to IP address 188.114.96.3, served by Cloudflare and delivering content over HTTP/3.

The site presented a TLS certificate issued by Google Trust Services under the WE1 label, indicating the use of a legitimate certificate authority despite the malicious intent. The page title returned by the server was "114514meme.click | 522: Connection timed out", suggesting the service was no longer responding at the time of observation. Security‑centric blocklists have already listed the domain; it appears on three blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL.

VirusTotal scans recorded four positive detections out of ninety‑three submitted scanners, reinforcing the classification as a phishing resource. Defenders should continue to enforce deny‑list rules for the domain and its associated IP, monitor any residual traffic from the Cloudflare edge nodes, and ensure that endpoint protection solutions reference the blocklist entries. Because the site is currently offline, any ongoing attempts to resolve the domain will likely result in connection failures, but the infrastructure could be repurposed to host future campaigns, so periodic re‑evaluation of the domain and its IP is advisable.