meteorag[.]cfd

The domain meteorag.cfd was registered on 16 Oct 2025 through Web Commerce Communications Limited and resolves to the Cloudflare address 104.21.1.179 (AS13335, United States). The site’s only visible attribute is the page title “Coin Exchange News”, which implies a focus on cryptocurrency‑related content, but no further page content has been captured. VirusTotal records indicate that 10 of 95 security‑vendor scanners have flagged the domain, demonstrating moderate detection across the ecosystem.

AlienVault OTX references the domain in a single threat‑intel pulse, and it appears on one public blocklist. Defensive services such as PhishDestroy have already blocked the host, and Gridinsoft assigns a trust score of 0 / 100, reinforcing its malicious reputation. The domain currently reports an offline status and does not present an SSL certificate, which is consistent with a temporary phishing infrastructure that has been taken down.

Uncertainties remain around the exact phishing kit or payload delivery method, as no sample pages or URLs have been disclosed. Defenders should immediately add meteorag.cfd to URL filtering rules, ensure that outbound connections to its Cloudflare IP are monitored or denied, and propagate the indicator to internal threat‑intel feeds. Ongoing surveillance of related Cloudflare‑hosted assets and periodic re‑query of VirusTotal and OTX are recommended to detect any re‑use of the domain or associated infrastructure.