63513205[.]com

The domain 63513205.com is currently flagged as a high‑risk generic phishing site. It was registered on August 10, 2025 and remains active as of the report date, July 12, 2026. No page title or target brand has been observed, so the precise impersonation vector is not yet identified.

Infrastructure analysis shows the domain is hosted behind Cloudflare's network (AS13335) with the IP address 188.114.97.3 located in the United States. DNS resolution uses the Cloudflare authoritative nameservers derek.ns.cloudflare.com and violet.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services under the WE1 designation, indicating a valid TLS layer. HTTP requests return a 526 status code, meaning the origin server failed to present a valid certificate to Cloudflare.

Threat intelligence indicates the domain appears on one security blocklist and has been flagged by PhishDestroy. VirusTotal reports a single positive out of 95 scanned vendors, confirming at least one detection. The domain is listed as active and is associated with a generic phishing classification, supporting the high risk rating.

Defenders should immediately add 63513205.com to domain deny lists and ensure that outbound traffic to its IP address 188.114.97.3 is blocked at the network perimeter. Email security gateways should be updated to reject messages containing URLs that resolve to this domain. Continuous monitoring of DNS queries for the domain and its associated Cloudflare nameservers is advised, as any change in resolution could indicate a shift to additional malicious infrastructure. Where possible, sinkholing the IP address or redirecting traffic to a safe browsing page can reduce user exposure while investigation continues.