cfd[.]divine-group[.]io

The domain cfd.divine-group.io is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, cfd.divine-group.io has been taken offline, though it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical indicators confirm the domain's malicious nature. cfd.divine-group.io was flagged by 6 of 95 security vendors on VirusTotal, including alphaMountain.ai, Certego, and CyRadar. It appears on three security blocklists: PhishDestroy, MetaMask, and SEAL. The domain was registered through Immaterialism Limited on February 21, 2026, and resolved to the IP address 104.21.63.228, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'DIVINE'. The site returned an HTTP 526 status, indicating an invalid SSL configuration. Scamadviser assigned it a trust score of 1 out of 100.

Users who interacted with cfd.divine-group.io should take immediate action to mitigate risk. If credentials were entered, change passwords for all affected accounts and enable two-factor authentication. Monitor accounts for unauthorized activity and report any fraudulent transactions. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims of phishing scams may also file complaints with organizations such as the FBI’s IC3 or their national cybercrime reporting center.