finance-analytics-cb[.]work

The domain finance-analytics-cb.work is assessed as having an elevated risk level, with a specific threat type of brand impersonation. The domain impersonates Cloudflare, a well-known cloud service provider, which could lead to unauthorized access to user credentials and sensitive information if users are deceived into interacting with it.

Infrastructure analysis reveals that the domain has been flagged by 7 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain was registered through GoDaddy.com, LLC and resolves to the IP address 104.19.194.29. It was created on October 15, 2025, and currently appears on two security blocklists: PhishDestroy and OISD. The Gridinsoft trust score for this domain is 0/100, suggesting a complete lack of trustworthiness. The domain has been taken offline, which may indicate it was used for a targeted campaign or was shut down due to security alerts.

To mitigate the risks associated with brand impersonation, users should verify the authenticity of any sign-in pages by directly accessing the official Cloudflare website or using verified links. Organizations should educate employees about the dangers of brand impersonation and implement strict verification protocols for any external links or emails. Additionally, network administrators should configure firewalls and security systems to block known malicious IPs and domains, such as 104.19.194.29, and monitor for any suspicious activity related to brand impersonation.