southfreak[.]in

This domain southfreak.in is currently flagged as a high‑risk generic phishing site. The site is reachable over HTTPS using a Google Trust Services / WE1 certificate, indicating a valid TLS handshake. DNS resolution points to 104.21.91.117, an address owned by Cloudflare (AS13335) located in the United States. Registration details show the domain was created on 17 August 2022 through NameCheap, Inc., and the authoritative name servers are marge.ns.cloudflare.com and toby.ns.cloudflare.com. Technical fingerprinting reveals a WordPress stack backed by MySQL and PHP, with client‑side libraries including jQuery and Google Hosted Libraries, and the site is served behind Cloudflare with HTTP/3 enabled. The HTTP response code is 200, and the page title returned is “SouthFreak – Enjoy Your Time!

– Enjoy Your Time!”. No additional content analysis is available. Reputation services have marked the domain as malicious: PhishDestroy lists it as blocked, it appears on one public security blocklist, and AlienVault OTX includes it in a single threat‑intel pulse. Gridinsoft assigns a trust score of 0 out of 100. VirusTotal scans show three of ninety‑three AV engines flag the domain, reinforcing the malicious assessment.

Defenders should treat traffic to southfreak.in as hostile. Immediate actions include adding the domain and its resolving IP to outbound and inbound deny lists, enforcing DNS sink‑hole rules for the associated Cloudflare IP range, and monitoring for any changes in the TLS certificate or page title. Continuous re‑scanning with multi‑engine services is advised to capture potential payload updates. Because the underlying hosting is Cloudflare, takedown requests may be limited; coordination with the registrar (NameCheap) and Cloudflare abuse channels is recommended for remediation.