cvaszoez[.]cfd

On July 23, 2026, the domain cvaszoez.cfd was examined following reports of credential phishing activity. The domain was registered through Aceville Pte. Ltd. on October 22, 2025 and is currently marked as taken offline. DNS resolution points to the IPv4 address 43.160.194.46, which is hosted in Singapore under ASN 132203 associated with a Tencent building on Kejizhongyi Avenue. No TLS certificate is presented for the host, indicating that communications are unencrypted. The authoritative name servers are a.dnspod.com, b.dnspod.com and c.dnspod.com, typical of the DNSPod service.

Google Safe Browsing classifies the site as social engineering, and VirusTotal records 14 detections out of 95 scanned security vendors, confirming malicious intent. The domain appears on a single public blocklist and has been explicitly blocked by the PhishDestroy filtering service. AlienVault OTX references the host in three separate threat‑intel pulses, reinforcing its association with phishing campaigns. Independent reputation services assign very low scores: Gridinsoft rates the domain 0 out of 100 and Scamadviser gives it 20 out of 100, both indicating a high likelihood of abuse. The available evidence supports a high‑risk credential phishing profile, yet the actual landing page content, page title, and any targeted brand have not been publicly disclosed.

Consequently, the precise phishing kit or victim lure remains uncertain. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the IP address, and add the host to local and cloud‑based threat‑intelligence feeds. Given the lack of SSL and the low reputation scores, any outbound connections to this host should be treated as malicious. Ongoing observation of the associated IP and rapid ingestion of future VirusTotal or OTX updates are recommended to maintain coverage.