m[.]atrfuxus[.]cc

This domain, m.atrfuxus.cc, is flagged as a high-risk generic phishing threat. It was created on March 22, 2026, and remains active as of July 12, 2026. The page title is ATFX, indicating the domain is likely impersonating the ATFX brand to deceive visitors. Infrastructure analysis reveals the domain resolves to IP 172.67.167.117, located in Canada and associated with Cloudflare, Inc. The nameservers are jermaine.ns.cloudflare.com and robin.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services (WE1). The domain is registered through Gname.com Pte. Ltd. Three security blocklists—PhishDestroy, MetaMask, and SEAL—have flagged this domain. VirusTotal shows 3 out of 94 security vendors detecting it as malicious, and Gridinsoft assigns a trust score of 0/100. Defenders should treat this domain as an active phishing threat, block access at the network level, and monitor for related subdomains or infrastructure. The exact page content beyond the title has not been analyzed, so the specific method of deception (e.g., credential harvesting) remains uncertain.