get-buy[.]cfd

This domain, get-buy.cfd, was registered on June 9, 2026, and is currently classified as an active generic phishing threat under investigation. Analysis reveals the domain appears on one security blocklist and is blocked by PhishDestroy, indicating prior detection by at least one anti-phishing vendor. As of the latest scan data, no detections were reported by the 91 security vendors on VirusTotal, though the absence of flags does not confirm safety. Infrastructure details such as hosting provider, IP address, and autonomous system number (ASN) are not yet publicly available, limiting deeper network-level analysis.

The domain's registration date is recent, which is consistent with patterns observed in short-lived phishing campaigns designed to evade detection. Defenders should treat get-buy.cfd as a potential threat vector until further evidence emerges. Recommended actions include monitoring for new detections on threat intelligence platforms, checking for updates on blocklists, and reviewing network logs for connections to this domain.

If the site is encountered in enterprise environments, it should be blocked at the proxy or firewall level pending additional analysis. Given the current lack of detailed content analysis, the exact nature of the phishing scheme—such as the targeted brand or specific tactics—remains unconfirmed. Security teams are advised to correlate this domain with other indicators of compromise (IOCs) in ongoing investigations.