ksghnfcpaa[.]cgil[.]pt

The domain ksghnfcpaa.cgil.pt has been identified as a generic phishing threat and is currently rated as high risk by PhishDestroy analysts. This domain, now taken offline, was flagged by Google Safe Browsing for phishing activity and appeared on one security blocklist. While no specific brand was impersonated, the generic phishing classification suggests it could have been used for credential harvesting or malware distribution.

Technical analysis reveals that ksghnfcpaa.cgil.pt resolved to IP address 62.193.192.27 and was issued an SSL certificate by Let's Encrypt (R13). The domain was created on March 07, 2026, and at the time of investigation, 26 out of 95 security vendors on VirusTotal flagged it as malicious. The page title displayed an error, indicating the site may have been taken down shortly after detection. Despite the short lifespan, the high flag rate and blocklist presence underscore its dangerous nature.

As the domain is now offline, the immediate threat is mitigated, but users should remain cautious of similar domains. PhishDestroy recommends that users never interact with unsolicited links and always verify website legitimacy through trusted security tools. If you previously visited ksghnfcpaa.cgil.pt, run a full antivirus scan and monitor for suspicious activity. For ongoing protection, rely on real-time threat intelligence from PhishDestroy.