asfenaqii[.]cfd

Analysis of asfenaqii.cfd indicates that the domain was registered on November 21, 2025 through Web Commerce Communications Limited and currently resolves to the IP address 104.21.78.36, which is hosted by Cloudflare (AS13335) in the United States. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal reports that six out of ninety-five scanners flag the domain, suggesting a moderate level of detection across independent engines.

Gridinsoft assigns the domain a trust score of zero out of one hundred, reinforcing the low reputation assessment. The domain is configured with Cloudflare nameservers abdullah.ns.cloudflare.com and chelsea.ns.cloudflare.com, but it does not present an SSL/TLS certificate, which is consistent with the observed offline HTTP status. No page title, brand target, or phishing kit identifier is available from the collected intelligence, leaving the exact victim lure unknown.

The limited detection footprint—only one blocklist entry and a modest number of vendor detections—combined with the absence of TLS and a zero trust rating, points to a typical generic phishing infrastructure that has been taken offline, possibly after a short campaign window. Defenders should continue to monitor the IP address 104.21.78.36 for any re‑use in future malicious activities, enforce outbound filtering for the domain, and update intrusion detection signatures to include the observed nameserver pattern. Additional investigation, such as retrieving historic HTTP responses via web archives, may reveal the specific brand or credential collection method employed, enabling more precise threat‑intel enrichment.