kicaw[.]saustartar[.]beer

PhishDestroy has identified kicaw.saustartar.beer as a generic phishing domain currently under active investigation. The site displays a fraudulent Cloudflare security challenge page titled 'Attention Required! | Cloudflare', attempting to trick visitors into believing they need to verify their identity or bypass a security check. This tactic is commonly used to harvest sensitive information or deliver malware. The domain is considered active and poses a real threat to users who may encounter it through phishing emails or malicious links.

This domain was registered through Dynadot Inc on February 24, 2026, and resolves to IP address 104.21.38.100, which is associated with Cloudflare's infrastructure, adding a layer of false legitimacy. Despite being flagged on 1 security blocklist, VirusTotal shows 0 detections out of 95 vendors, meaning the domain has not yet been widely identified as malicious. The SSL certificate is issued by Let's Encrypt with fingerprint E8, further masking the site's true intent. The combination of a recent registration, low blocklist coverage, and impersonation of a trusted brand like Cloudflare makes this a dangerous phishing vector.

Given the active status and ongoing investigation, PhishDestroy strongly advises users to avoid visiting kicaw.saustartar.beer under any circumstances. If encountered, do not enter any personal information or interact with the page. Organizations should add this domain to their blocklists and educate users about the risks of fake security prompts. Continuous monitoring is recommended as the threat may evolve or be used in targeted campaigns. Report any sightings to relevant security teams to help expand blocklist coverage and protect others.