# securefunds.one — MALICIOUS

> securefunds.one is an active crypto drainer impersonating financial services. Flagged by 17 of 95 VirusTotal vendors. Avoid and report immediately.

## Summary
PhishDestroy identifies securefunds.one as an active credential theft domain posing as a financial services portal. This domain is currently engaged in credential phishing, targeting users under the guise of secure fund management or withdrawal authentication. The operation is classified as elevated risk due to its active status and ongoing lure tactics.

This domain was flagged by 17 of 95 VirusTotal vendors, registered through NameSilo, LLC, and resolves to IP 188.114.97.3. It was created on November 12, 2025, and shows low trust indicators with no reputable standing in security blocklists. The SSL certificate is issued by Google Trust Services, which does not validate the domain’s legitimacy.

This domain remains active and dangerous. Users should block securefunds.one at the network and DNS level, avoid any interaction with the site, and report it to their security teams or platforms like Google Safe Browsing, PhishTank, and AbuseIPDB. Organizations are advised to update threat intelligence feeds and SIEM rules to include this domain and IP as indicators of compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-11-12 17:11:23
- Registrar: NameSilo, LLC
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 17 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/67eda3a1-5a1f-40fb-8515-8e741f924077
- PhishDestroy: https://phishdestroy.io/domain/securefunds.one/
- LLM endpoint: https://phishdestroy.io/domain/securefunds.one/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/securefunds.one/
Last updated: 2026-04-13