Is oriflo.cfd safe?

Browser protection and vendor detections point to phishing

The browser threat feed records two SOCIAL_ENGINEERING entries for this URL, and the derived browser-protection feed describes the address as malware or social engineering. That classification is the strongest single fact here: it means the address has been observed serving a deception page rather than a normal website.

Independent scanning agrees. The multi-engine malware scan reports 6 malicious and 2 suspicious results across 93 engines, and six antivirus families returned an adverse verdict, with phishing labels among them. Fifty engines returning harmless does not cancel a phishing classification, because phishing pages are often short-lived and only some vendors have seen the live lure.

Clean plumbing, unknown operator

The technical basics are unremarkable: the saved TLS check found a valid encrypted connection, and the hosting IP carries an abuse confidence score of 0/100 with no saved reports. Those facts only say the server and certificate are not themselves broken or blacklisted; they say nothing about who is behind the domain or what the page does when it is live.

The operator is unidentified. The domain was registered on 2026-11-12, one day before this analysis, on the .cfd extension, and no merchant, brand or owner is disclosed anywhere in the evidence. A brand-new domain with no identity behind it, already flagged for social engineering, fits the pattern of a throwaway phishing host rather than a business.

The site's own pages could not be reviewed

The root address returned HTTP 404 after a redirect to HTTPS, so no page text, contact details, About page or policy content was captured. That means the specific lure — which brand or login page the phishing chain imitates — is not documented here, and the score is capped at Moderate Risk by policy for an unread site without an established reputation. The phishing detections themselves push the rating well below that cap.