store[.]communitycreateshop[.]com

The domain store.communitycreateshop.com was observed hosting a brand‑impersonation page that targets the Cloudflare brand. Registration data shows the domain was created on 21 February 2026 through GMO Internet Group, Inc., doing business as Onamae.com, and the authoritative name servers are dns1.regway.com, dns2.regway.com, dns3.regway.com, and dns4.regway.com. DNS resolution points to the IPv4 address 91.92.46.216, which belongs to AS41745 (Baykov Ilya Sergeevich) and is geolocated to Poland. The server does not present an SSL/TLS certificate, and HTTP requests return a 403 status code, indicating that unauthenticated access is denied. The page title returned by the server is "Attention Required! | Cloudflare," matching the declared impersonation of Cloudflare.

VirusTotal scans recorded 15 of 93 security engines flagging the domain as malicious. Google Safe Browsing classifies the site under the social engineering category, and the domain appears on one external security blocklist. PhishDestroy has taken the domain offline, and the current status is reported as offline. Gridinsoft assigns a trust score of 0 out of 100, further corroborating the malicious nature of the host.

Analysis is limited by the lack of TLS and the 403 response, preventing direct observation of the page content; therefore the exact visual or functional characteristics of the impersonation page remain unknown. defenders should block the domain at DNS and proxy layers, add the IP address 91.92.46.216 to firewall deny lists, and incorporate the observed page title and nameserver pattern into detection signatures. Continuous monitoring of the associated autonomous system for additional abusive registrations is recommended to mitigate potential follow‑on activity.