flowcram[.]com[.]tw

Analysis conducted on July 12 2026 identifies flowcram.com.tw as an active high‑risk infrastructure linked to a generic phishing campaign that targets cryptocurrency users. The domain was registered on April 28 2026 through the registrar PCHOME and is served via Cloudflare with nameservers dane.ns.cloudflare.com and nena.ns.cloudflare.com. DNS resolution points to IP 172.67.155.211, which is geolocated to Canada and belongs to Cloudflare’s network. HTTP requests return a 301 redirect, and the TLS certificate is issued by Let’s Encrypt (E8). The page title returned by the server is "Not Acceptable!". Independent blocklists have flagged the domain: it appears on three security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, and AlienVault OTX lists the domain in one threat‑intel pulse. VirusTotal analysis shows that 2 of 91 scanned security vendors flagged the domain. The combination of recent creation, low trust score, blocklist presence, and detections supports a classification as a crypto‑related phishing operation. Defenders should block DNS resolution to flowcram.com.tw, monitor outbound connections to its IP address, and consider adding the domain to existing URL filtering policies. Continuous re‑evaluation is advised as additional telemetry becomes available.