x13kkaskckl123x123[.]cfd

This domain x13kkaskckl123x123.cfd is assessed as an elevated-risk generic phishing infrastructure designed for credential theft. The page presents a fake system administration interface labeled 'Plesk Obsidian 18.0.77', indicating likely impersonation of hosting control panel login portals used to harvest administrative credentials.

Technical intelligence confirms multiple malicious indicators. VirusTotal reports 17/95 security vendors flagging the domain. The domain was registered through Global Domain Group LLC and created on May 05, 2026. It resolves to IP 31.56.209.19 located in NL (Pfcloud infrastructure). The domain appears on 1 security blocklist and is currently marked as taken offline. SSL is issued via Let's Encrypt / R12. The page title 'Plesk Obsidian 18.0.77' is consistent with spoofed hosting administration login pages used in credential phishing campaigns.

At present, the infrastructure is offline, but historical evidence indicates prior malicious configuration consistent with credential harvesting operations. Security response should include continued blocklisting of the domain and associated IP, monitoring for reactivation under the same hosting provider, and review of any exposed credentials if interaction occurred. Users who accessed the site should rotate hosting panel credentials immediately and inspect server logs for unauthorized access attempts, as similar infrastructure is often rapidly redeployed across new domains.