twttg[.]cfd

Analysis on twttg.cfd as of July 24 2026 confirms that the domain was created on 11 October 2025 and is currently listed as offline. The domain is registered through Porkbun LLC and resolves to the Cloudflare‑hosted address 172.66.44.246, which is associated with ASN 13335 in the United States. No TLS certificate is presented, indicating that HTTPS is not configured. The page title returned when the site was reachable was “Get Your Rewards!”, a common lure used in credential‑stealing campaigns.

Six of ninety‑five VirusTotal scanners flagged the domain, demonstrating partial detection across the security community. Gridinsoft assigned a trust score of zero out of one hundred, and the domain appears on a single external blocklist. PhishDestroy actively blocks the domain, reinforcing its classification as a phishing infrastructure. Nameservers guss.ns.cloudflare.com and vera.ns.cloudflare.com are standard Cloudflare resolver entries, offering no additional attribution.

The evidence set does not include Safe Browsing or Open Threat Exchange records, and no public malware kit or brand impersonation details are disclosed beyond the generic “Get Your Rewards!” title. The combination of recent creation, low trust score, lack of encryption, and multiple vendor detections warrants an elevated risk rating. Defenders should add twttg.cfd to web‑filter deny lists, monitor DNS queries for the IP 172.66.44.246, and ensure that any credential‑submission endpoints are blocked. Because the site is offline, real‑time content analysis is unavailable; further investigation should focus on historical traffic logs and any residual phishing emails that reference the domain.