humafinance[.]info

humafinance.info was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on 21 February 2026. The domain resolves to the Cloudflare edge address 104.21.71.108, which is assigned to AS13335 in the United States. No TLS certificate is presented, indicating that HTTPS is not configured. A single security blocklist, PhishDestroy, has flagged the domain and it currently appears on that list.

VirusTotal records show that the site was scanned by 91 anti‑malware engines, none of which reported a detection; the lack of a detection does not constitute assurance of benign behavior. The only visible page element captured is the title “Um momento…”, which offers no further context about the intended victim or lure. The domain’s operational status is listed as offline, but the historical data remain relevant for threat‑intelligence correlation.

Defenders should add 104.21.71.108 to network‑level deny lists, enforce blocking of the hostname humafinance.info in web filtering appliances, and monitor for any future re‑activation of the domain. Continuous observation of the associated IP range and the registrar’s new registrations is advised, as the same infrastructure is frequently reused in phishing campaigns. Because the site lacks an SSL certificate and presents only a generic title, automated content‑analysis tools have limited visibility, reinforcing the need for proactive blocking based on the known indicators.