apinaga4bql[.]cfd

This domain, apinaga4bql.cfd, is assessed as a high-risk generic phishing threat that remains active as of July 12, 2026. The domain was registered on May 11, 2026, through NAMECHEAP INC, a registrar commonly associated with low-reputation domains. It resolves to IP address 104.21.63.126, which is hosted by Cloudflare, Inc. in Canada, and uses Cloudflare nameservers (daisy.ns.cloudflare.com and jonah.ns.cloudflare.com). The SSL certificate is issued by Let's Encrypt (E8). The page title, 'APINAGA4BQL Tawarkan Suasana Baru dengan Performa Konsisten,' is in Indonesian and does not clearly indicate a specific brand or legitimate service. VirusTotal data shows that 14 out of 91 security vendors flag this domain as malicious. It is blocked by three security blocklists, including PhishDestroy, MetaMask, and SEAL, and has a Gridinsoft trust score of 0 out of 100, indicating very low trustworthiness. The site returns an HTTP 200 status and employs AMP, Lightbox, Cloudflare, and HTTP/3 technologies. The exact nature of the fraudulent content has not been fully analysed, but the generic phishing classification and multiple security vendor detections strongly suggest it is part of a phishing campaign. Defenders should block the domain at the network level, monitor for any associated IP addresses or subdomains, and alert users who may have visited the site to change credentials and scan for malware. The domain's recent creation, use of a privacy-shielded registrar, and low trust scores are consistent with established phishing infrastructure patterns.