# finance-guide-online.info — SUSPICIOUS

> PhishDestroy flags finance-guide-online.info as a fake financial guide scam. Created March 22, 2026, it currently shows 0/95 VirusTotal detections and resolves.

## Summary
PhishDestroy has placed finance-guide-online.info under investigation as a generic phishing domain posing as a financial advisory resource. The site mimics legitimate financial guidance platforms to harvest user credentials and payment details through deceptive forms and misleading content.

Risk assessment reveals this domain has not yet been flagged by security vendors despite resolving to IP 172.67.173.117 and using a Let's Encrypt SSL certificate. Domain registration occurred on March 22, 2026, through Dynadot Inc. VirusTotal shows 0/95 detections, indicating it currently evades detection engines. The domain's recent creation and absence from blocklists suggest an active campaign may be in its early stages.

Immediate mitigation requires users to avoid interacting with any content from finance-guide-online.info, particularly forms requesting financial or personal information. Network defenders should block the domain at DNS level and monitor for connections to 172.67.173.117. Security teams should flag this as a high-priority indicator of compromise due to its active status and potential for credential harvesting. Additionally, users who may have submitted data should change passwords and monitor accounts for unusual activity. This advisory will be updated as new intelligence emerges.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-22 10:33:24
- Registrar: Dynadot Inc
- IP: 172.67.173.117

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/a6fb41f8-fbe4-48e9-a6ff-c6ef9c6b0389
- PhishDestroy: https://phishdestroy.io/domain/finance-guide-online.info/
- LLM endpoint: https://phishdestroy.io/domain/finance-guide-online.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/finance-guide-online.info/
Last updated: 2026-03-23