m[.]ptfdi[.]net

This report analyzes the domain m.ptfdi.net, which was flagged by SOCRadar and detected by 7 out of 95 VirusTotal vendors. The domain is currently offline and has a GridinSoft trust rating of 0/100, indicating a high-risk threat. The site was created on 2026-03-27, a very recent date, and uses a Let's Encrypt SSL certificate (E8). Its IP address 188.114.97.3 is hosted in Canada by CloudFlare, Inc., and the registrar is Cloudflare, Inc. The nameservers are kenia.ns.cloudflare.com and matt.ns.cloudflare.com. The domain appears on 1 blocklist.

The threat posed by m.ptfdi.net is consistent with a newly registered, malicious domain used for phishing, malware distribution, or other fraudulent activities. The combination of a recent creation date, low detection rate, and zero trust score suggests it was set up for a short-lived campaign. The use of CloudFlare for hosting and nameservers is common for both legitimate and malicious sites, providing anonymity and protection against takedowns. The Let's Encrypt SSL certificate allows for encrypted traffic, which can bypass some security filters.

The current status of m.ptfdi.net is offline, which may indicate it has been taken down or is temporarily inactive. However, the domain remains registered and could be reactivated. The risk level is high due to the low trust score, recent creation, and detection by security vendors. Users should block this domain and avoid any interaction with it. Organizations should monitor for any related subdomains or similar patterns associated with this IP or registrar.