cloudshareit[.]top

cloudshareit.top entered the PhishDestroy evidence set on May 14, 2026. The stored content classification is generic phishing. The assembled evidence scores 95/100 (critical).

Four independent sources are positive: VirusTotal, MetaMask, SEAL, and Spamhaus DBL. VirusTotal recorded 10 detections among 92 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Sophos on Jul 18, 2026 at 16:45 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 13, 2026 at 14:36 UTC. The evidence is not unanimous. URLQuery recorded no positive detection. On May 14, 2026 at 16:22 UTC, Google Safe Browsing returned no flag; PhishStats returned no feed match. URLScan completed without a malicious verdict (score 0).

Cloaking was recorded with HTTP 200 on Aug 7, 2026 at 10:10 UTC. Registration records for the domain list 耐思尼克国际集团有限公司 as the registrar and May 14, 2026 as the creation date. Registration preceded first observation by 0 days. At collection time, the hostname resolved to 172.67.135.166 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. The stored server header is nginx. Captured page title: “Startpage - Private Search Engine. No Tracking. No Search History.”. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 02:02 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Aug 12, 2026; checked May 14, 2026 at 20:00 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as generic phishing.