app[.]cfdcapitalcompany[.]com

The domain app.cfdcapitalcompany.com has been flagged for generic phishing activities, with a high-risk level identified through multiple threat assessment indicators. Registered on March 12, 2026, and still active, the domain has garnered a Gridinsoft trust score of 0 out of 100, suggesting a significant risk related to its legitimacy. The domain is currently resolving to the IP address 104.21.74.82, and it has been identified on four security blocklists. This level of scrutiny indicates that the domain is closely associated with malicious activities, specifically targeting users through phishing schemes.

A notable finding in the analysis is the alarming statistic from VirusTotal, where 13 out of 95 security vendors have flagged the domain, aligning with its presence on multiple blocklists. Additionally, the domain is actively blocked by several security measures, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. This aggregated evidence points strongly toward the domain being utilized for fraudulent purposes, potentially as a means to harvest sensitive user information under the guise of legitimacy.

The technologies detected on the domain, which include Highcharts, Vue.js, Cloudflare Browser Insights, and Cloudflare HTTP/3, suggest a certain level of sophistication in its deployment. However, the use of such technologies does not inherently indicate safety; rather, it may be leveraged to create a more convincing phishing environment. Defenders should be wary of any interactions with this domain, advising users to avoid any engagement that could compromise their personal information.

Given the current threat landscape, organizations should implement monitoring and blocking measures on networks to prevent any unauthorized access attempts linked to app.cfdcapitalcompany.com. As this domain remains active, continued vigilance and proactive security strategies are essential to protect against potential phishing attacks targeting unsuspecting users.