portsigngov[.]cfd

PhishDestroy identifies portsigngov.cfd as a generic phishing domain that was observed impersonating a reCAPTCHA verification page. The domain is currently offline, but while active it posed a significant threat to users who may have encountered it through deceptive links or emails. The site attempted to trick visitors into completing a fake reCAPTCHA challenge, a common technique used to harvest credentials or deliver malware.

Technical indicators for portsigngov.cfd include an SSL certificate from Let's Encrypt (YR1), which provided a false sense of security. The domain was registered through OwnRegistrar, Inc. and created on June 16, 2026. It resolved to IP address 37.77.150.237 and appeared on 3 security blocklists. VirusTotal analysis shows that 3 out of 95 security vendors flagged this domain as malicious. Despite the low detection rate, the combination of impersonation tactics and blocklist presence confirms the threat.

As of now, portsigngov.cfd has been taken offline, which reduces immediate risk. However, users who may have interacted with this site should scan their devices for malware and monitor accounts for suspicious activity. PhishDestroy recommends staying vigilant against similar phishing pages that use CAPTCHA verification as a lure. Always verify URLs before entering sensitive information and enable multi-factor authentication where possible.