oflfy[.]com

This domain, oflfy.com, is flagged as an active phishing site targeting Chinese-speaking users with fraudulent streaming services. The page title, translated from Chinese, advertises 'free online viewing of high-definition Chinese TV dramas, multi-platform support, and high-quality downloads,' suggesting an attempt to lure victims with promises of premium content. Infrastructure analysis reveals the domain is hosted behind Cloudflare (AS13335, US) on IP 104.21.26.197, a common tactic to obscure origin servers and evade takedowns. The domain was registered on February 17, 2024, through Gname.com Pte. Ltd., and uses Cloudflare nameservers (audrey.ns.cloudflare.com, colin.ns.cloudflare.com). No SSL certificate is present, increasing the risk of credential interception or malware delivery over unencrypted connections. Security vendors have detected malicious activity: 8 of 95 engines on VirusTotal flagged the domain at the time of assessment. The domain appears on at least one security blocklist and is actively blocked by PhishDestroy. The Gridinsoft trust score of 1/100 further indicates high risk. While the exact phishing mechanism (e.g., credential harvesting, malware distribution) is not confirmed, the combination of free content promises, lack of encryption, and Cloudflare obfuscation aligns with known streaming scam patterns. Defenders should treat this domain as high-risk and prioritize blocking it at DNS, proxy, and endpoint layers. Monitor for connections to 104.21.26.197 or Cloudflare IPs associated with this domain. If user reports of credential theft or malware infections emerge, investigate for potential follow-up campaigns targeting the same victim pool. Given the domain's age and active status, assume it remains operational unless evidence confirms takedown.