ystfvbej[.]elementor[.]cloud

The domain ystfvbej.elementor.cloud was registered on February 21, 2026 through MarkMonitor, Inc. and is currently hosted on Cloudflare infrastructure (ASN 13335) with the IP address 162.159.137.9 located in the United States. The site presents a 503 HTTP response and serves a TLS certificate from Let’s Encrypt (E7). Technical fingerprints identify a WordPress stack with MySQL, PHP, Elementor, Elementor Cloud, HSTS, and Cloudflare Browser Insights enabled. The page title returned by the server reads "Nazihex3 – Just another Elementor hosted website ;)". The domain has been blocked by PhishDestroy and appears on one external blocklist; its Gridinsoft trust score is 0/100. VirusTotal scans report 9 detections out of 93 vendors. Nameservers are carl.ns.cloudflare.com and leah.ns.cloudflare.com. While the exact malicious payload or credential‑harvesting mechanisms have not been observed, the combination of a generic phishing classification, low trust rating, and active blocklist status indicates a high‑risk threat. Defenders should add ystfvbej.elementor.cloud and its resolving IP to DNS and firewall block lists, enforce strict TLS validation, and monitor outbound connections for any attempts to contact the domain. Continuous re‑evaluation is advised as additional indicators may emerge.