sspvt[.]cfd

The domain sspvt.cfd was registered on February 21, 2026 and is presently taken offline. DNS resolution points the name to the IP address 172.67.172.253, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The site presented a minimal page title consisting of a single period (".") and employed an SSL certificate identified as WE1, indicating that transport encryption was in place but providing no further validation of the certificate authority. Threat intelligence flags the domain as a brand‑impersonation operation targeting Google, specifically categorized as a Tech Support Scam. VirusTotal analysis recorded detections by seven of ninety‑three scanning engines, confirming that multiple security vendors consider the domain malicious. Independent blocklists corroborate the risk: PhishDestroy has listed the domain, and it appears on one additional security blocklist. The Gridinsoft trust score is 0 out of 100, reinforcing the assessment of a low‑reputation endpoint.

Infrastructure analysis shows the use of a reputable CDN provider, which is a common tactic for threat actors seeking to hide malicious origins behind legitimate services. The combination of a recent registration date, low trust score, and multiple vendor detections suggests that the domain was purpose‑built for a short‑lived scam campaign rather than a long‑term operation. No further evidence is available regarding the content of the site, the presence of malicious payloads, or any command‑and‑control infrastructure.

Defenders should continue to block the domain at network perimeters and update endpoint and DNS filtering policies to reflect its malicious classification. Monitoring for any re‑registration of the name or the emergence of similar domains hosted on the same Cloudflare IP range is advised.