fjcbdae[.]pilot45[.]com

Analysis of the domain fjcbdae.pilot45.com indicates it was a generic phishing infrastructure flagged by security vendors and blocklists. The domain, registered on December 23, 2024, through Gname.com Pte. Ltd., resolved to the IP address 104.21.2.72, hosted on Cloudflare's network (AS13335) in the United States. Nameservers were configured as aron.ns.cloudflare.com and titan.ns.cloudflare.com. No SSL certificate was present, and the page title was recorded as '网站筹建中' (translated: 'Website under construction'), a common placeholder that may have been used to mask malicious intent or evade initial scrutiny.

As of the report date, the domain is offline, though it was previously detected by 14 of 95 security vendors on VirusTotal and blocked by PhishDestroy. It also appeared on one security blocklist, reinforcing its classification as malicious. The Scamadviser trust score of 1/100 further corroborates its high-risk status. While the exact nature of the phishing campaign remains unconfirmed due to the lack of visible content or brand impersonation in the available data, the infrastructure aligns with patterns observed in credential harvesting or fraudulent redirects.

Defenders should treat this domain as compromised and prioritize blocking it at the DNS and network levels. Monitoring for re-registration or subdomain reuse under pilot45.com is recommended, as the parent domain may continue to host malicious activity. If logs or endpoint telemetry indicate prior interaction with this domain, initiate incident response procedures to assess potential exposure. Given the Cloudflare hosting, additional scrutiny of other domains resolving to the same IP or nameservers may uncover related threats.