fajsdfasfffffk[.]click

Analysis of the domain fajsdfasfffffk.click indicates active malicious infrastructure linked to phishing operations. Registered on June 14, 2025, through Tucows Domains Inc., the domain resolves to IP 172.67.166.103, hosted on AS13335 (Cloudflare, Inc.) in the US. Nameservers evan.ns.cloudflare.com and violet.ns.cloudflare.com further confirm Cloudflare as the CDN provider. The domain returns an HTTP 200 status, suggesting an operational webpage, and the extracted page title 'scammer_bez_mozga – Fragment' implies a non-legitimate purpose, though the exact content remains unanalyzed. Infrastructure review shows the domain is flagged on one security blocklist (PhishDestroy) and is recognized by 3 of 95 vendors in VirusTotal as malicious. SSL certificate data points to Google Trust Services (WE1), consistent with Cloudflare-protected sites. Detected technologies include HTTP/3, reinforcing the use of modern web protocols. While the registration age (13 months) is not inherently suspicious, the combination of a non-descriptive domain name, Cloudflare obfuscation, and security vendor detections aligns with phishing or scam delivery patterns. Defenders should treat this domain as high-risk. Block resolution at network perimeter devices, monitor for internal connections to 172.67.166.103, and alert users if the domain appears in logs. Further analysis of captured HTTP traffic or endpoint telemetry may clarify the specific phishing lure or payload, but no brand or scam category is confirmed from available data.