cdbgfxg[.]com

This domain, cdbgfxg.com, is identified as a generic phishing site designed to mimic legitimate login portals. The page title 欢迎光临 (Welcome) suggests an attempt to impersonate a Chinese-language service, though no specific brand or platform is confirmed. Analysis of the infrastructure reveals no association with known cryptocurrency drainer kits or credential-harvesting frameworks, indicating a likely standalone phishing operation targeting user credentials without additional malicious payloads.

Technical indicators confirm the domain was registered on January 12, 2025, through Gname.com Pte. Ltd. It resolved to the IP address 154.81.107.102, hosted on AS134548 (DXTL Tseung Kwan O Service) in Hong Kong. At the time of assessment, 17 out of 95 security vendors on VirusTotal flagged the domain as malicious. The domain appeared on two security blocklists and was actively blocked by multiple threat intelligence feeds. No SSL certificate was present, increasing the likelihood of detection by browser security mechanisms. Google Safe Browsing status was not explicitly recorded, but the domain’s inclusion in multiple blocklists suggests prior classification as harmful.

As of the latest verification, cdbgfxg.com has been taken offline, likely due to hosting provider intervention or registrar enforcement. While the immediate threat is mitigated, residual risk remains for users who may have interacted with the domain during its active period. Organizations are advised to monitor for credential reuse attempts and implement multi-factor authentication to mitigate potential account takeovers. Network defenders should update blocklists to include the domain and associated IP address, while end users should verify the legitimacy of login pages, particularly those with non-standard or unexpected language prompts.