heise[.]dfuidxwg[.]top

The domain heise.dfuidxwg.top is a generic phishing site that poses an elevated risk of credential theft or financial fraud. It does not impersonate a specific brand and is not linked to a known crypto-drainer kit. As of the latest verification, heise.dfuidxwg.top has been taken offline, but it remains a documented threat for historical reference.

Technical indicators confirm the malicious nature of heise.dfuidxwg.top. The domain is flagged by 4 of 95 security vendors on VirusTotal, including ADMINUSLabs, ESET, and Kaspersky, and is listed on Google Safe Browsing for 'SOCIAL_ENGINEERING'. It appears on 1 security blocklist (PhishDestroy) and was registered through Gname.com Pte. Ltd. on February 24, 2026. The domain resolves to the IP address 103.12.149.252, hosted in Hong Kong under AS152194 (CTG Server Limited), and uses an SSL certificate issued by Let's Encrypt (R13). The observed page title was 'CPT MARKETS', and the site employed technologies such as Vue.js, Nginx, HSTS, and HTTP/3. Nameservers for the domain are a4.share-dns.com and b4.share-dns.net.

Individuals who may have interacted with heise.dfuidxwg.top should immediately change any passwords entered on the site and enable two-factor authentication on all accounts. Monitor financial statements and credit reports for signs of fraud. Report the domain to relevant authorities, such as local cybercrime units or platforms like Google Safe Browsing, to aid in broader threat mitigation. If the site was accessed via a corporate or institutional network, notify the IT security team to prevent further exposure.