fastfilenext[.]com

fastfilenext.com entered the PhishDestroy evidence set on Jun 22, 2026. The stored content classification is generic phishing. The assembled evidence scores 100/100 (critical).

Two independent sources are positive: VirusTotal and Spamhaus DBL. VirusTotal recorded 27 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, AlphaSOC, ArcSight Threat Intelligence, BitDefender, Certego, Chong Lua Dao, CRDF, CyRadar, DNS8, Dr.Web, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Lumu, MalwareURL on Jul 18, 2026 at 18:45 UTC. Spamhaus DBL: DBL_BOTNET on Jul 23, 2026 at 06:30 UTC. The evidence is not unanimous. On Jun 22, 2026 at 22:10 UTC, AlienVault OTX listed 11 community pulse references (not vendor detections); Google Safe Browsing returned no flag. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. URLScan completed without a malicious verdict (score 0) on Jun 23, 2026 at 08:12 UTC.

HTTP 301 was recorded on Aug 7, 2026 at 10:13 UTC. Registration records for the domain list CNOBIN INFORMATION TECHNOLOGY LIMITED as the registrar and Mar 21, 2026 as the creation date. At collection time, the hostname resolved to 172.67.177.67 (AS13335 Cloudflare, Inc.). The recorded endpoint location is San Francisco, US. The stored server header is cloudflare. Captured page title: “fastfilenext.com”. DOM analysis completed on Jul 28, 2026 at 02:20 UTC; stored DOM score 0/100. The evidence archive retains 1 visual capture from PhishDestroy. IoC extraction completed on Jul 29, 2026 at 02:52 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists E7 as the certificate issuer with validity through Aug 16, 2026.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. Taken together, the page content and independent findings support classifying this hostname as generic phishing.