money-receive[.]cfd

Analysis indicates that the domain money-receive.cfd was registered on August 01, 2026 through Global Domain Group LLC. The domain resolves to the IPv4 address 188.114.97.10 and utilizes Cloudflare name servers (elle.ns.cloudflare.com and jeff.ns.cloudflare.com). The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service. VirusTotal records show that the domain was examined by 91 antivirus and URL scanning engines, none of which reported a detection at the time of the scan; this absence of detections does not constitute a safety guarantee. The threat classification supplied is generic phishing and the operational status is listed as active, indicating that the infrastructure is still reachable.

Observable evidence confirms the presence of a recently created domain, a shared hosting IP associated with Cloudflare, and a minimal blocklist footprint. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or brand targeting is available in the current dataset, leaving the exact content and lure mechanisms unverified. Consequently, the risk posture cannot be fully quantified, but the combination of a fresh domain, active resolution, and inclusion on a phishing‑specific blocklist suggests a non‑trivial likelihood of malicious use.

Defenders should add money-receive.cfd to local deny lists, monitor DNS queries for the associated IP address, and enforce blocking through web filtering solutions that reference the PhishDestroy feed. Continuous re‑scanning on VirusTotal or similar platforms is advisable to capture any future detections. Network telemetry that flags outbound connections to 188.114.97.10 should be investigated, and any authentication attempts to services that may be impersonated by this domain should be treated as suspicious until further content analysis is performed.