comedianmeme[.]xyz

Analysis of comedianmeme.xyz shows a newly created domain (registered March 23, 2026) that is currently taken offline. The domain resolves to the Cloudflare‑hosted address 104.21.85.43, an IP registered to Cloudflare, Inc. in California. Infrastructure traces reveal that the domain uses Cloudflare’s DNS service (lynn.ns.cloudflare.com, walk.ns.cloudflare.com) and presents a valid Let's Encrypt certificate (E8) issued shortly after registration. Threat intelligence indicates the domain appears in four AlienVault OTX pulses and is listed on three independent security blocklists, with explicit blocks from PhishDestroy, MetaMask, and SEAL.

Gridinsoft’s trust scoring assigns a rating of 0 / 100, reinforcing the low‑reputation assessment. VirusTotal scans involving 94 security vendors recorded four detections, confirming malicious activity despite the majority of engines classifying the site as benign. No public page title, brand target, or specific phishing lure is available, and the site’s HTTP status is unavailable due to its offline state.

Consequently, the exact phishing vector and victim profile remain uncertain. Defenders should incorporate comedianmeme.xyz into URL filtering and DNS block policies, monitor the associated Cloudflare IP for re‑use by other malicious domains, and maintain vigilance for any re‑activation of the domain. Continuous correlation with OTX pulse updates and blocklist feeds is recommended to capture emerging indicators tied to this infrastructure.