cvdf34d[.]shop

As of July 24, 2026, the domain cvdf34d.shop has been identified as a phishing site. This domain is currently active and has been flagged by one out of 91 security vendors on VirusTotal, indicating a potential risk to users. The domain is also listed on one security blocklist, specifically PhishDestroy, which suggests that it has been associated with malicious activities.

The nameservers for the domain are launch1.spaceship.net and launch2.spaceship.net, and it resolves to the IP address 47.242.217.10. While the exact content of the website has not been analyzed, the presence on a security blocklist and the flag from a security vendor suggest that the site is being used for phishing attacks. Defenders should take immediate action to block this domain and warn users against accessing it.

Further investigation is recommended to identify the specific phishing tactics employed and to determine any connections to known threat actors or phishing kits. Organizations should also monitor their networks for any signs of compromise related to this domain and consider implementing additional security measures to protect against phishing threats.