zest-v2[.]cfd

The domain zest-v2.cfd is under investigation for a generic phishing threat and is currently offline. There is no specific brand impersonation noted in the available intelligence. The domain was registered through Spaceship, Inc. and created on June 08, 2026.

Infrastructure analysis reveals that the domain zest-v2.cfd has been flagged by 0 out of 95 VirusTotal vendors, indicating no immediate detection by mainstream antivirus engines. The domain is registered through Spaceship, Inc., and resolves to the IP address 156.234.7.62. It was created on June 08, 2026, and has been listed on 3 security blocklists, including MetaMask, PhishDestroy, and SEAL. Additionally, the domain has been mentioned in 2 threat intelligence pulses on AlienVault OTX, and it holds a Gridinsoft trust score of 0/100, suggesting a highly untrustworthy profile. The SSL certificate is issued by Let's Encrypt.

The current status of the domain is offline, which reduces the immediate risk of active phishing attempts. However, the domain's low trust score and presence on multiple security blocklists indicate a significant historical threat. Recommendations include monitoring the domain for any signs of reactivation, maintaining strict user awareness training to recognize and avoid phishing attempts, and ensuring that access to this domain is blocked by network security controls. Further investigation into the IP address 156.234.7.62 and the registrar Spaceship, Inc. is advised to identify any related malicious activities.