dfdcvip[.]com

The domain dfdcvip.com was registered on October 11, 2025 through Dominet (HK) Limited and currently resolves to the IP address 104.21.39.184, which belongs to AS13335 Cloudflare, Inc. in the United States. The site is served without an SSL certificate and returns the page title "Suspected phishing site | Cloudflare". Google Safe Browsing has flagged the domain for social engineering, and it appears on one public security blocklist, where it is actively blocked by the PhishDestroy service. VirusTotal analysis shows that 14 of 95 security vendors have identified the domain as malicious, reinforcing the high‑risk assessment.

Independent reputation services assign extremely low trust scores, with Scamadviser rating the domain at 1 out of 100 and Gridinsoft reporting a score of 0 out of 100. The domain is also referenced in 17 AlienVault OTX threat‑intel pulses, indicating repeated observation by the security community. The name server configuration includes jill.ns.cloudflare.com, thaddeus.ns.cloudflare.com, ns7.alidns.com, and ns8.alidns.com, reflecting a mixed Cloudflare and AliDNS infrastructure.

Although the site is presently offline, its recent activity and the convergence of multiple detection sources justify a high‑risk classification for generic phishing. Defenders should ensure that the domain is added to local and network‑level blocklists, monitor the associated IP for any re‑use, and consider extending filtering rules to cover the observed name server set. Ongoing threat‑intel feeds should be consulted for any resurgence, and incident response teams should treat any future communications originating from this domain as potentially malicious.