m[.]djcinfx[.]com

The domain m.djcinfx.com was registered on June 13, 2025 through Gname.com Pte. Ltd. and is hosted on Cloudflare infrastructure, using the authoritative name servers coraline.ns.cloudflare.com and rocky.ns.cloudflare.com. DNS resolution points to IP address 104.21.22.178, which belongs to AS13335 Cloudflare, Inc. and is located in the United States. The site is currently taken offline, but historical data shows it was actively serving a page with the title "DJCIN" and was classified as a social media phishing campaign. Security telemetry indicates that the domain has been blocked by three separate blocklists—PhishDestroy, MetaMask, and SEAL—and appears on three additional security blocklists, reinforcing its malicious reputation.

Technical fingerprinting revealed the use of Ant Design and Vue.js frameworks, Cloudflare Browser Insights, and HTTP/3, all delivered via Cloudflare’s edge network. The Gridinsoft trust score for the domain is 0 out of 100, indicating extreme risk. VirusTotal analysis recorded three positive detections out of ninety‑four scanned security vendors, further confirming the malicious nature of the infrastructure.

No publicly available SSL/TLS details, HTTP status codes, or Safe Browsing verdicts were captured, leaving those specific vectors unverified. Defenders should immediately block m.djcinfx.com at DNS and proxy layers, add the associated IP 104.21.22.178 to network‑level deny lists, and incorporate the domain and IP as indicators of compromise in endpoint detection and response tools. Continuous monitoring for re‑registration or related subdomains is advised, as threat actors may attempt to resurrect the infrastructure under a new label.