hvfcu[.]bwfm[.]platform[.]verint[.]com

PhishDestroy identifies the domain hvfcu.bwfm.platform.verint.com as the host of an active credential phishing page impersonating Hingham Village Federal Credit Union (HVFCU). The fraudulent login portal is currently live and remains under active investigation. This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan. The infrastructure is registered through CSC Corporate Domains, Inc., resolving to IP address 54.209.175.156 with a Let’s Encrypt SSL certificate in use. The domain was created on May 22, 2000, and has not been observed on any major blocklists to date, though its low detection rate suggests it may have been recently compromised or provisioned for malicious purposes. Trust scores for the domain remain unremarkable at this time, with no prior history of abuse reported. While the domain exhibits several benign characteristics—such as an aged registration and use of a legitimate registrar—its association with a spoofed login page targeting HVFCU customers elevates the risk profile. Users are advised to avoid interacting with this domain and to verify all login URLs directly with the official HVFCU website. Organizations should consider blocking the domain at the network perimeter and updating email filtering rules to detect similar lures. Security teams are encouraged to monitor for additional infrastructure tied to this campaign and report any observed activity to relevant fraud units.