# ffin.global — SUSPICIOUS

> ffin.global is a credential harvesting scam resolving to 104.26.12.51. Users should avoid entering sensitive data to prevent account compromise and financial.

## Summary
PhishDestroy identifies ffin.global as an active credential harvesting domain posing as a legitimate service. This domain was flagged due to its association with generic phishing campaigns targeting unsuspecting users.

The domain resolves to IP 104.26.12.51 and is registered through Registrar of Domain Names REG.RU LLC. Its creation date is March 07, 2018, and it utilizes an SSL certificate issued by Google Trust Services. Despite zero detections on VirusTotal (0/95), the domain remains unlisted on major blocklists, leaving it operational without immediate detection. The combination of a trusted SSL certificate and low detection rates makes it particularly deceptive for credential theft.

Organizations and users should block ffin.global at the network and DNS levels to prevent access. Security teams must monitor for any submissions to this domain, as it may indicate compromised credentials or ongoing phishing campaigns. Users who encounter this domain should report it immediately and avoid interacting with any login prompts or forms hosted there.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2018-03-07 12:59:16
- Registrar: Registrar of Domain Names REG.RU LLC
- IP: 104.26.12.51

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/ffin.global
- PhishDestroy: https://phishdestroy.io/domain/ffin.global/
- LLM endpoint: https://phishdestroy.io/domain/ffin.global/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ffin.global/
Last updated: 2026-04-02