moneyherohk[.]online
“not_found”
The phishing domain moneyherohk.online impersonates Providencelending, a financial comparison platform. It has been flagged as malicious by 2 out of 91 vendors on VirusTotal and appears on blocklists maintained by PhishDestroy and ScamSniffer. Despite its offline status, the domain's initial activity highlights the ongoing threat of phishing campaigns targeting financial services.
Registered with NameSilo, LLC, and hosted on an IP address managed by Cloudflare, Inc., moneyherohk.online was created on June 12, 2026. PhishDestroy detected the domain on June 20, 2026, just eight days after its registration. This rapid detection underscores the effectiveness of PhishDestroy's pipeline in identifying threats before they are widely recognized by antivirus databases.
The domain's SSL certificate was issued by Google Trust Services, adding a layer of legitimacy that could deceive unsuspecting users. The platform risk score of 61 out of 100 indicates a moderate threat level, emphasizing the need for continued vigilance in monitoring similar domains. By exploiting the brief window between domain registration and antivirus database updates, phishing domains like moneyherohk.online can launch attacks before being widely blocked.
Although moneyherohk.online is currently offline, its brief existence serves as a reminder of the persistent nature of phishing threats. Financial institutions and users must remain alert to the evolving tactics employed by cybercriminals, who often leverage brand impersonation to gain trust and access sensitive information.
Network Security Intelligence Registrar context
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 1 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% confidenceVirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive