asfiragdigitol[.]cfd

This domain, asfiragdigitol.cfd, is flagged as a high-risk phishing infrastructure based on multiple technical indicators. Registered on November 7, 2025, through a domain registrar, the site remains active as of July 12, 2026, despite presenting a 521 error indicating a server outage. Analysis reveals the domain resolves to IP address 172.67.145.22, a Cloudflare-hosted endpoint, which is commonly exploited to obscure malicious origin servers while providing SSL encryption. The SSL certificate is issued by Google Trust Services, a legitimate provider often leveraged by threat actors to lend false credibility to phishing pages. Infrastructure analysis indicates the use of Cloudflare’s network, including HTTP/3 protocol support, which can complicate detection and blocking efforts. The domain appears on two security blocklists and is flagged by 6 of 95 security vendors in a recent scan, suggesting moderate but consistent detection across threat intelligence platforms. Additionally, the domain is referenced in 22 threat intelligence pulses, indicating prior identification in active phishing campaigns. The page title, asfiragdigitol.cfd | 521: Web server is down, does not reveal specific branding or targeting, leaving the exact nature of the phishing content uncertain at this time. While the current server error may temporarily hinder access, the domain’s persistence and infrastructure suggest it remains a viable threat. Defenders should treat this domain as an active phishing resource and implement network-level blocking for the IP address 172.67.145.22, as well as domain-based filtering for asfiragdigitol.cfd. Monitoring for changes in server status or content delivery is recommended, as the site may resume operation with updated phishing material. Given the use of Cloudflare, additional scrutiny of related domains or IPs within the same network range may uncover further malicious activity.