it77ofh[.]cfd

The domain it77ofh.cfd is currently classified as a high-risk phishing threat, with evidence indicating active malicious intent. As of July 12, 2026, the domain has been flagged by 8 out of 95 security vendors on VirusTotal, suggesting recognition of its potential for phishing-related activities. Furthermore, the domain has a trust score of 0 out of 100 according to Gridinsoft, which indicates that it is not considered trustworthy by security analysts. It is also noteworthy that it77ofh.cfd is listed on two separate security blocklists, reinforcing its association with malicious activities.

The domain was registered on April 28, 2026, through FewMoreTaps OÜ, and it currently resolves to the IP address 104.21.82.66. The use of Cloudflare and HTTP/3 technologies indicates an attempt to obscure the hosting details, which is common in phishing infrastructure to evade detection. Additionally, the presence of an SSL certificate issued by Let's Encrypt is often misused by malicious actors to lend an air of legitimacy to their operations.

Further analysis reveals that it77ofh.cfd has been identified in 23 threat intelligence pulses on AlienVault OTX, suggesting that it has been under scrutiny by various threat intelligence platforms. The domain remains active, and it has been specifically blocked by PhishDestroy and BLP-Malware, indicating that security measures are already being employed against it. Given these findings, it is advised that organizations remain vigilant and implement defensive measures against potential phishing attempts originating from this domain. Continuous monitoring and updating of security protocols are recommended to mitigate risks associated with this active threat.