# navfinance-portal.com — SUSPICIOUS > navfinance-portal.com is under investigation for phishing risks. Stay cautious and verify before interacting with this site. Monitor updates now. ## Summary PhishDestroy identifies navfinance-portal.com as an active domain linked to generic phishing activity with a risk level currently under investigation. Although no immediate detections appear on VirusTotal, the domain's recent creation on June 17, 2025, raises concerns. The domain resolves to IP 104.21.84.245 and is registered through Ultahost, Inc., a registrar sometimes associated with malicious registrations. The absence of current security vendor flags does not rule out potential phishing, warranting continued scrutiny. Users and organizations should exercise caution when encountering this domain. PhishDestroy recommends monitoring the domain for further indicators of compromise and advises against sharing sensitive information until the investigation concludes. ## Threat Details - Verdict: SUSPICIOUS - Site status: alive (HTTP 200) - Page title: openmediavault Workbench ## Domain Intelligence - Registered: 2025-06-17 21:58:42 - Registrar: Ultahost, Inc. - Country: US - IP: 104.21.84.245 - Nameservers: dahlia.ns.cloudflare.com damian.ns.cloudflare.com ## Detection Status - VirusTotal: 1 vendors flagged Vendors: [] - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Screenshot: https://urlscan.io/screenshots/019d01c0-e25b-7790-8d6a-2beffb05d901.png - Cloudflare Radar: https://radar.cloudflare.com/scan/b5a62b22-3f0d-40a6-a961-070d9cac5a0e - PhishDestroy: https://phishdestroy.io/domain/navfinance-portal.com/ - LLM endpoint: https://phishdestroy.io/domain/navfinance-portal.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/navfinance-portal.com/ Last updated: 2026-03-19