adjara-gudju4[.]cfd

This domain, adjara-gudju4.cfd, is identified as a credential harvesting phishing site designed to mimic legitimate authentication portals. Analysis of the page title, 'Twilight Coder — Results,' suggests an attempt to deceive users into submitting sensitive login credentials under the guise of a coding or software-related service. No specific brand impersonation or drainer kit signatures were conclusively identified, though the generic phishing classification indicates broad targeting of user credentials rather than cryptocurrency wallets or financial transactions. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain resolves to IP address 188.114.96.3 and was registered on February 21, 2026, through NiceNIC International Group Co., Limited. Security vendors flagged the domain with a VirusTotal detection score of 16/95, while it appears on one security blocklist. The site employed Cloudflare Browser Insights and HTTP/3, leveraging Cloudflare’s infrastructure to obscure hosting origins. The SSL certificate was issued by Google Trust Services, a common tactic to lend superficial legitimacy. Gridinsoft assigned a trust score of 0/100, further corroborating malicious intent. The domain has been taken offline, reducing immediate risk to end users. However, residual threats persist due to the domain’s recent registration and the use of bulletproof registrar services. Users who interacted with the site should assume credential exposure and initiate password resets on any accounts accessed during the exposure window. Organizations are advised to block the domain and associated IP at the network perimeter and monitor for related phishing campaigns using similar naming conventions or Cloudflare-hosted infrastructure. Continuous vigilance is recommended, as threat actors frequently re-deploy phishing assets under new domains.