# sharemainduit.cfd — SUSPICIOUS

> PhishDestroy identifies sharemainduit.cfd as a fake bank login phishing page. Scans show 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies sharemainduit.cfd, a domain registered on June 09, 2025, as an active phishing site targeting banking credentials. This site mimics official bank login portals to trick users into entering sensitive financial information, such as usernames, passwords, or card details. The threat is classified as generic phishing due to its broad, non-targeted approach, often relying on urgency or fear tactics (e.g., 'account suspended') to prompt immediate action. Users who land on this page risk direct theft of their banking credentials, leading to unauthorized transactions or identity theft.  This domain was flagged after resolving to IP address 166.117.173.87, a server with no current detections on VirusTotal (0/95 engines). The site is registered through Gname.com Pte. Ltd., a registrar known for high volumes of short-lived domains, and secured with a Let's Encrypt SSL certificate—a tactic often used to lend false legitimacy to phishing pages. The domain’s recent creation date (June 09, 2025) and minimal footprint suggest it may be part of a rapidly evolving campaign, making detection challenging for traditional tools.  If you visited sharemainduit.cfd, assume your credentials or personal data were compromised. Do not reuse passwords associated with banking or financial services. Immediately change your bank passwords using a secure, trusted device and enable two-factor authentication (2FA). Scan your device for malware using reputable antivirus software, as some phishing pages deploy keyloggers or other malicious payloads. Report the incident to your bank and consider freezing your accounts if you entered sensitive information. Avoid clicking any links in emails or messages related to this domain, as they may lead to further phishing attempts. For ongoing safety, monitor your accounts closely and use a password manager to alert you to potential credential reuse.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-06-09 10:54:51
- Registrar: Gname.com Pte. Ltd.
- IP: 166.117.173.87

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c97b9ebf-8ec7-4086-bee8-41c2737edc03
- PhishDestroy: https://phishdestroy.io/domain/sharemainduit.cfd/
- LLM endpoint: https://phishdestroy.io/domain/sharemainduit.cfd/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/sharemainduit.cfd/
Last updated: 2026-03-22