cedaro-bitflow[.]com

Analysis of the domain cedaro-bitflow.com shows that it was registered on February 21 2026 through NETIM SAS and is served by the Netim nameservers ns1.netim.net, ns2.netim.net and ns3.netim.net. The site’s HTTP response is currently offline, and the only visible attribute is the page title, which simply repeats the domain name. VirusTotal records indicate that 11 of 95 scanned security engines flagged the domain, a proportion that typically aligns with malicious classifications.

Independent threat feeds corroborate this assessment: the domain appears on at least one public blocklist, is listed in a single AlienVault OTX pulse, and is actively blocked by the PhishDestroy service. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the elevated risk rating. No additional infrastructure details such as IP address, ASN, or hosting provider are disclosed in the available intelligence.

The combination of multiple vendor detections, blocklist presence, low trust score, and the fact that the domain is already taken offline suggests a short‑lived phishing campaign that was likely disrupted. Defenders should add cedaro-bitflow.com to deny‑list rules across DNS, proxy, and email gateways, continue monitoring for any resurgence or related domains registered by the same registrar, and consider sharing the indicator with upstream threat‑intelligence platforms. Ongoing vigilance is advised, as the lack of content prevents a full behavioural analysis but the existing signals are sufficient to justify proactive blocking.