navi52[.]com

Analysis of navi52.com indicates that the domain was registered on February 21 2026 through Squarespace Domains LLC and subsequently resolved to the Cloudflare‑owned address 104.21.32.1, an IP located in the United States under ASN 13335. The site served an SSL certificate issued by Google Trust Services (WE1) and enforced HSTS, while also supporting HTTP/3 via Cloudflare. An HTTP request returned a 403 status code, and the domain is currently listed as offline. Security telemetry shows the domain appears on two public blocklists and is explicitly blocked by PhishDestroy and DiscordPhishing.

AlienVault OTX references the domain in two separate threat‑intel pulses, and Gridinsoft assigned a trust score of 0 out of 100. VirusTotal scans recorded 12 positive detections out of 93 scanners, reinforcing the malicious classification. The page title observed during the scan was “Rust Case Opening”, but no further content analysis is available.

Taken together, the evidence points to a generic phishing infrastructure that was actively serving malicious content before being taken offline. Defenders should continue to block the domain at network perimeter devices, update URL filtering and threat‑intel feeds, and monitor for any re‑hosting of the same payloads on other Cloudflare‑protected assets. Because the domain is already offline, no immediate remediation of compromised users is indicated, but organizations that observed traffic to navi52.com should verify that no credential or session data were submitted.