# xn--pmb-hoa.fun — SUSPICIOUS

> xn--pmb-hoa.fun flagged by 3 of 95 VirusTotal vendors for romance scam phishing. Check the full report.

## Summary
PhishDestroy identifies xn--pmb-hoa.fun as an active romance scam phishing domain targeting online daters. The site is currently live and distributing malicious content designed to deceive victims into financial fraud or credential theft.

This domain was flagged by 3 of 95 VirusTotal vendors, registered through DYNADOT LLC, and resolves to IP address 104.21.54.49. It was created on February 02, 2026, and holds a low blocklist count with a Google Trust Services SSL certificate indicating high trust scores.

While the domain appears deceptively legitimate due to its SSL encryption and recent registration, it remains an elevated threat. Users should avoid interaction and report any incidents to their financial institutions or cybercrime reporting platforms. Organizations are advised to block this IP and domain at the network perimeter to prevent access.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-02 09:35:07
- Registrar: DYNADOT LLC
- IP: 104.21.54.49

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/xn--pmb-hoa.fun
- PhishDestroy: https://phishdestroy.io/domain/xn--pmb-hoa.fun/
- LLM endpoint: https://phishdestroy.io/domain/xn--pmb-hoa.fun/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xn--pmb-hoa.fun/
Last updated: 2026-04-10