keawaesa[.]cfd

As of July 12, 2026, the domain keawaesa.cfd is flagged as a high-risk credential phishing site. This domain resolves to the IP address 104.21.80.76, which is located in Canada and managed by Cloudflare, Inc. The domain was created on April 22, 2026, and is registered through Spaceship, Inc. An analysis of the domain's infrastructure reveals the use of Cloudflare's nameservers (penny.ns.cloudflare.com and scott.ns.cloudflare.com) and HTTP/3 technology, indicating a modern and potentially sophisticated setup. The SSL certificate is issued by Let's Encrypt, which is a common practice among legitimate and malicious sites alike. However, the HTTP status code 403 suggests that the site may be under maintenance or intentionally blocking access, which is a tactic often used by threat actors to evade detection and analysis. Despite the 403 status, the domain appears to have a page title 'Custom House Design in Calgary | MKL Design Studio,' which may be an attempt to appear legitimate to unsuspecting visitors. This domain is listed on three security blocklists and has a Gridinsoft trust score of 0 out of 100, both strong indicators of its malicious nature. Out of 95 security vendors on VirusTotal, 13 have flagged this domain as suspicious, further corroborating its high-risk status. Defenders are advised to block this domain and educate users about the risks of credential phishing, particularly when visiting sites that prompt for sensitive information. Given the domain's active status and the presence of multiple red flags, it is crucial to monitor for any further developments and to ensure that network defenses are updated to reflect the current threat landscape.