cvsxzaonx[.]cfd

The domain cvsxzaonx.cfd is a generic phishing site designed to steal user credentials through credential phishing. It does not impersonate a specific brand or use a known drainer kit. As of the latest verification, cvsxzaonx.cfd has been taken offline, but it previously posed an elevated risk to users who may have interacted with it.

Technical indicators confirm the malicious nature of cvsxzaonx.cfd. The domain was flagged by 14 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and BitDefender. It appears on 2 security blocklists, PhishDestroy and PhishingDB, and was registered through Aceville Pte. Ltd. on October 23, 2025. The domain resolved to the IP address 43.160.194.46, hosted in Singapore under AS132203, and used nameservers a.dnspod.com, b.dnspod.com, and c.dnspod.com. No SSL certificate was issued, and the observed page title was 'Página de inicio - Logística global y envíos internacionales España'. AlienVault OTX recorded the domain in 17 threat intelligence pulses, while Gridinsoft assigned it a trust score of 0/100.

Users who may have entered credentials on cvsxzaonx.cfd should immediately change passwords for any accounts accessed through the site and enable two-factor authentication where available. Monitor accounts for unauthorized activity and report any suspected fraud to financial institutions or relevant service providers. To help prevent further abuse, victims can report the domain to their security software vendor, local cybercrime units, or platforms like Google Safe Browsing or PhishTank.