finance-portfolio[.]icu

The domain finance-portfolio.icu was registered on February 23, 2026 and is currently taken offline. DNS resolution points to 172.67.187.89, an address owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The site presents a 404 Not Found page title, indicating that no landing content is presently served. An SSL certificate labeled WE1 is in place, showing that TLS was configured despite the lack of active content.

Reputation scoring is extremely low, with Gridinsoft assigning a trust score of 0 out of 100. VirusTotal scans report that five of ninety‑three security vendors flagged the domain, suggesting that at least a minority of AV engines detected malicious characteristics. The domain is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the view that it has been used for phishing‑related activity.

While the specific brand or service being impersonated has not been identified in the available intelligence, the combination of a newly created domain, Cloudflare hosting, low trust rating, and multiple blocklist entries aligns with typical infrastructure used for credential‑harvesting or fraud campaigns. Defenders should continue to block finance-portfolio.icu at perimeter controls, monitor for any future DNS resolution changes, and update intrusion‑detection signatures to include the associated IP address and SSL fingerprint. Because the site is offline, there is no immediate payload to analyze, but the observed indicators warrant inclusion in threat‑intel feeds and ongoing watchlists for potential re‑activation.