centrlfuge[.]com

As of July 12, 2026, the domain centrlfuge.com is flagged as a high-risk generic phishing campaign. The domain's page title, 'Centrifuge | Infrastructure for Onchain Asset Management,' suggests an attempt to impersonate the legitimate Centrifuge project, which is known for its onchain asset management solutions. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on May 18, 2026, and currently resolves to the IP address 172.67.183.15, which is associated with Cloudflare, Inc. in California. The SSL certificate is issued by Let's Encrypt, a common choice for legitimate and malicious websites alike due to its free and automated issuance process. The domain is actively blocked by several security solutions, including PhishDestroy and SEAL, and has been included in one threat intelligence pulse on AlienVault OTX. However, it has not yet been flagged by VirusTotal, which may indicate a recent or low-profile campaign. The HTTP status code 200 indicates that the website is accessible and operational, and the Gridinsoft trust score of 0/100 underscores the domain's reputation as highly suspicious. Defenders should consider blocking access to this domain at the network level and educating users about the potential risks associated with visiting or interacting with websites that mimic legitimate services. Additionally, monitoring for any related domains or IP addresses that share similar infrastructure or registration patterns is advisable to detect and mitigate broader phishing activities. While the current threat landscape suggests that this domain is actively being used for phishing, further investigation into the content and behavior of the site is recommended to confirm the nature and extent of the threat.