click[.]email[.]westfield[.]com

This domain, click.email.westfield.com, is currently active and classified as generic_phishing with a high risk rating. Infrastructure analysis shows the domain resolves to IP 45.74.10.46, which is hosted in the United States and associated with ASN 14340 owned by Salesforce.com, Inc. The domain was registered on February 21, 2026 through CSC Corporate Domains, Inc., and uses a DigiCert Global G2 TLS RSA SHA256 2020 CA1 certificate. DNS is served by four AWS name servers (ns-1463.awsdns-54.org, ns-1765.awsdns-28.co.uk, ns-771.awsdns-32.net, and an unnamed fourth). HTTP requests return a 403 status, and the site presents the page title “MegaETH | Public Sale”, suggesting a cryptocurrency‑related lure. Security telemetry indicates the domain is listed on a single blocklist and has been blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, and two of ninety‑three VirusTotal scanners have flagged the host. HSTS is observed, but no additional technologies were identified. The limited detection history and the 403 response leave the exact malicious payload unknown, but the combination of a high‑risk phishing classification, low trust score, and active blocklist status warrants immediate mitigation. Defenders should add the domain to deny lists, monitor DNS queries for the IP address, and enforce outbound filtering to prevent credential or token submission to this host. Ongoing observation is advised to detect any change in HTTP response or additional vendor detections.