Is cfvkj.com safe?

Eight engines call it phishing while the page shows nothing

Eight of 94 engines returned an adverse result for this domain, with families including alphaMountain.ai, Cluster25, CRDF, Forcepoint ThreatSeeker, G-Data, Gridinsoft, SOCRadar and Sophos, and categories such as phishing and fraud. That is a decisive adverse classification, not a single stray hit.

The live page does not show the mechanism behind those labels. What was captured is the default nginx server page, with no scripts, forms, credential fields, downloads, popups or notification prompts, and the browser run recorded only same-site navigation. The most likely reading is that malicious content sat on this host earlier, or on a path or subdomain that was not captured, and the server has since been reset to its default state.

The browser threat feed returned no warning for the URL and the hosting IP carries an abuse confidence score of 0/100 across zero saved reports, so the phishing labels are vendor classifications rather than documented harm to a visitor. That softens the picture but does not erase eight independent adverse verdicts.

No operator, a young domain and an unvalidated connection

Nothing on the page identifies who runs the domain: no contact email, phone, address, social link or registration number appears, and no merchant branding or footer is visible. A visitor has no way to attribute the site to anyone.

The registrable domain is about 11 months old, and a domain-marketplace listing matching the registration date of 2025-12-09 and an expiry of 2026-12-09 was found in research. A short-lived domain with no content and no owner identity is a common staging pattern, though the listing itself is only a record and proves nothing about intent.

The saved TLS check did not validate the connection and the scanned address was served over plain HTTP, which fits an unconfigured or abandoned deployment rather than a maintained service.

No offer, no checkout, no cross-domain funnel

The only two outbound links on the page are nginx.org and nginx.com, the web server project's own documentation and commercial-support sites. They are part of the default server page and carry no commercial intent for this host, so there is no affiliate, presell, payment or order path to trace.

Because there is no storefront, checkout, subscription or account flow, there is nothing to assess for refunds, billing or delivery. The risk here is not a visible commercial trap but an unidentified host that security vendors have tied to phishing.