# cftguardians.com — SUSPICIOUS

> cftguardians.com is under investigation for credential phishing. 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies cftguardians.com as an active credential phishing domain currently under investigation by fraud detection teams. This deceptive site mimics legitimate financial or membership portals to harvest login credentials, posing a direct threat to user security. The threat level remains under investigation due to evolving tactics, but the site is flagged as active in multiple threat intelligence pipelines. Users are advised to treat this domain with extreme caution and avoid any interaction until further notice.  This domain was flagged after domain intelligence analysis revealed critical risk indicators. cftguardians.com was registered on July 24, 2025, through GoDaddy.com, LLC, and resolves to IP address 138.68.150.13. Its SSL certificate was issued by Let's Encrypt, which does not inherently indicate trustworthiness. VirusTotal currently shows 0/95 detections, suggesting the domain has not yet been widely blacklisted or flagged by antivirus engines. No known association with established blocklists or trust scoring services was detected at the time of analysis, placing this domain in a high-risk gray zone where malicious behavior is strongly suspected but not yet confirmed.  To mitigate risk from this credential phishing threat, users should immediately block all traffic to cftguardians.com at the network or DNS level using enterprise firewalls, DNS filtering solutions, or browser-based blocklists. Organizations are advised to push security policies that flag or block this domain, and to monitor for encrypted traffic to 138.68.150.13. Users who may have interacted with this site should reset passwords used on any associated login pages and enable multi-factor authentication where available. Security teams should monitor for signs of credential compromise and conduct user awareness training to prevent further exposure. Until the investigation concludes, treat all content from this domain as untrusted.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-07-24 18:20:17
- Registrar: GoDaddy.com, LLC
- IP: 138.68.150.13

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/39d9bfda-edf5-4d72-aa0a-dcc9c2574fbf
- PhishDestroy: https://phishdestroy.io/domain/cftguardians.com/
- LLM endpoint: https://phishdestroy.io/domain/cftguardians.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cftguardians.com/
Last updated: 2026-03-26