fidgety-triangle[.]fontmaxplugin[.]cc

The domain fidgety-triangle.fontmaxplugin.cc was registered on November 02, 2025 through NiceNIC International Group Co., Limited and is currently taken offline. Infrastructure analysis shows the domain resolves to IP 188.114.97.3, which is owned by Cloudflare, Inc. (AS13335) and located in the United States. The name server configuration uses Cloudflare’s authoritative servers (dane.ns.cloudflare.com and nena.ns.cloudflare.com), and the site presents Cloudflare Browser Insights, Cloudflare, and HTTP/3 as detected technologies. The SSL certificate presented is issued by Google Trust Services under the WE1 label, indicating a valid TLS handshake despite the malicious classification.

HTTP responses return a 403 status and the page title is recorded as "404 Not Found," suggesting the content is intentionally hidden or removed. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist. VirusTotal analysis shows that 5 of 95 scanned security vendors flagged the domain, confirming a consensus of malicious intent. PhishDestroy also lists the domain as blocked.

The available evidence points to a generic phishing operation, but the exact phishing vector, targeted brand, or payload details are not disclosed in the current intelligence. Defenders should continue to block the domain at perimeter and DNS filtering layers, monitor for any resurgence of the IP address or related Cloudflare‑hosted assets, and consider adding the domain to internal threat‑intel feeds. Given the low trust score and multiple vendor detections, any outbound connections to this domain should be treated as high‑risk, and incident response teams should investigate any logs indicating recent communication attempts before the offline status was applied.