lips3[.]eu[.]com

Analysis of the domain lips3.eu.com shows it was registered on February 21, 2026 via Instra Corporation Pty Ltd. The site is protected by a Google Trust Services / WE1 SSL certificate and is served through Cloudflare, using HTTP/3. DNS resolution points to IP 104.21.44.16, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. HTTP responses return status 521 and the page title reports a 522 connection timeout, indicating the service is currently inaccessible but still active. Reputation data lists a Gridinsoft trust score of 0 / 100, placement on one security blocklist, and a block by PhishDestroy. VirusTotal scans show that 2 of 93 security vendors have flagged the domain. Nameservers are ns1.centralnic.net through ns4.centralnic.net. The evidence points to a high‑risk generic phishing infrastructure, though no payload or credential‑harvesting page has been observed. Defenders should add lips3.eu.com to network deny lists, monitor DNS queries for the associated IP, and consider blocking traffic from the Cloudflare edge IP range if not required. Continuous re‑scanning is advised to capture any future changes in malicious behavior.