jctdf[.]cfd

The domain jctdf.cfd was registered on 2026-02-21 and is currently taken offline. DNS resolution points to the IP address 104.21.80.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented is the Cloudflare TLS Issuing ECC CA 1, indicating the site was served behind Cloudflare's edge network. VirusTotal analysis shows that five of ninety-three scanning engines flagged the domain as malicious, reinforcing suspicion of abuse.

Gridinsoft assigned a trust score of zero out of one hundred, and the domain appears on a single public blocklist, specifically PhishDestroy, which has actively blocked it. The only visible content identifier is the page title “Не упусти возможность!”, a Russian phrase meaning “Don’t miss the opportunity!”, but no further page content or target brand has been disclosed. Because the site is offline, HTTP response codes could not be collected, and no Safe Browsing or Open Threat Exchange entries were provided. The evidence suggests that the domain was used for a generic phishing campaign, likely aiming to lure users with an urgency‑based message.

Defenders should add 104.21.80.1 to network‑level deny lists, enforce DNS filtering for jctdf.cfd, and monitor Cloudflare‑hosted IP ranges for similar activity. Continuous re‑scanning on VirusTotal and other multi‑engine platforms is advised to capture any future changes in detection status. Until more detailed payloads are observed, the domain should be treated as high‑risk and blocked across corporate security controls.