flowdrive[.]cfd

This domain, flowdrive.cfd, is flagged as a generic phishing threat under active investigation as of July 15, 2026. Infrastructure analysis reveals it was registered on April 23, 2026, through Global Domain Group LLC and currently resolves to the IP address 158.94.211.169. The domain uses nameservers a.dnspod.com, b.dnspod.com, and c.dnspod.com, which are commonly associated with domains involved in phishing or fraudulent activity. No specific brand target or phishing kit has been confirmed in available data, and the exact content or lure type remains unanalyzed. While no detections were reported by vendors in a recent scan, this does not confirm the domain's safety, as phishing domains often evade detection during early stages of deployment. Defenders should treat this domain as potentially malicious and monitor it for further indicators of compromise. Network-level blocking or logging of connections to 158.94.211.169 and the domain itself is recommended until additional intelligence confirms its status. The domain's recent creation and use of third-party nameservers suggest it may be part of a larger phishing campaign, though no direct links to other domains have been established at this time.