# cityfundingservice.site — SUSPICIOUS

> Avoid cityfundingservice.site to protect your data. This phishing domain is offline but stay vigilant and never share personal info on suspicious sites.

## Summary
PhishDestroy has identified cityfundingservice.site as a generic phishing domain designed to deceive users by mimicking legitimate communication channels. The domain's page title "1 new message" suggests an attempt to lure victims into clicking links or submitting sensitive information. Classified as medium risk, this domain aims to exploit user trust through social engineering tactics.

Technically, cityfundingservice.site resolves to the IP address 148.72.153.160 and was registered via HOSTINGER operations, UAB. Created recently on November 26, 2025, it appeared on one security blocklist and was flagged by 3 out of 95 security vendors on VirusTotal, indicating moderate detection by threat intelligence systems. The infrastructure and registration details align with common phishing setups that leverage low-cost hosting and newly registered domains.

Currently, cityfundingservice.site is offline, reflecting effective takedown or mitigation efforts. Despite this, users are advised to remain cautious, as similar domains may emerge. PhishDestroy recommends avoiding interaction with suspicious messages and verifying URLs before submitting any personal or financial information to prevent credential theft or fraud.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: 1 new message

## Domain Intelligence
- Registered: 2025-11-26 03:10:38
- Registrar: HOSTINGER operations, UAB
- Country: LT
- IP: 148.72.153.160
- IP Country: US
- IP City: St. Louis
- IP Org: AS30083 velia.net
- Nameservers: dns1.afeeshost.ltd dns2.afeeshost.ltd dns3.afeeshost.com dns3.afeeshost.ltd
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/BVP6cM0S/070a213a5ef0.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/cityfundingservice.site
- PhishDestroy: https://phishdestroy.io/domain/cityfundingservice.site/
- LLM endpoint: https://phishdestroy.io/domain/cityfundingservice.site/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cityfundingservice.site/
Last updated: 2026-03-19