app-falcon[.]pro

The domain app-falcon.pro is currently classified as a generic phishing site with a high risk rating and an active status as of 12 July 2026 (unique seed 06cb83). The site presents a TLS certificate issued by Google Trust Services under the WE1 intermediate, indicating a valid HTTPS endpoint. DNS resolution points to the IP address 188.114.96.3, which is hosted within the Cloudflare network.

Infrastructure analysis shows the hosting IP belongs to AS13335, operated by Cloudflare, Inc., and is geolocated to the United States. The authoritative name servers are brenna.ns.cloudflare.com and yichun.ns.cloudflare.com, confirming the use of Cloudflare’s DNS services. The web server reports HTTP status 403 for the initial request and supports HTTP/3, reflecting modern protocol adoption.

Reputation data reveals that the domain is listed on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal scans have flagged the domain by five out of ninety‑five security vendors, while Gridinsoft assigns a trust score of zero out of one hundred, indicating a strong malicious confidence. The page title captured as “Un instant…” is the only content indicator available; no additional page‑level analysis has been performed.

Defenders should enforce immediate blocking of app-falcon.pro at perimeter firewalls, DNS resolvers, and endpoint protection solutions. Continuous monitoring of DNS queries for the associated Cloudflare name servers and the IP 188.114.96.3 is advised to detect any pivot or re‑use of the infrastructure. Given the high risk classification and active status, security teams should also educate users about unsolicited communications that may reference this domain.