dgt[.]htef[.]cc

The domain dgt.htef.cc was registered on June 12, 2026 through Dominet (HK) Limited and currently resolves to the IP address 172.67.201.204. As of the report date, July 29, 2026, the domain appears on a single security blocklist and is listed by the PhishDestroy mitigation service as blocked. VirusTotal analysis shows that 10 of 91 security vendors have flagged the domain, indicating that multiple detection engines have identified malicious characteristics associated with the host.

The available intelligence does not include details on SSL certificate parameters, HTTP response codes, or page title content, so those aspects remain unverified. The limited blocklist presence suggests that broader community awareness of the domain may be emerging, while the 10 vendor detections provide early evidence of phishing-related activity. Defenders should prioritize adding dgt.htef.cc to internal deny lists and ensure that outbound traffic to the associated IP address 172.67.201.204 is monitored or blocked.

Continuous re‑evaluation of the domain on VirusTotal and other threat‑intel platforms is recommended to capture any changes in detection rates or additional blocklist listings. Organizations employing email filtering should treat any messages containing links to this domain as suspicious, and endpoint protection solutions should be configured to alert on connections to the resolved IP. Further investigation is warranted to obtain page content, SSL details, and any observed payloads, which will clarify the full scope of the phishing campaign and support remediation efforts.