MALICIOUS — HIGH
huddle01[.]finance
5 of 91 security engines flagged the domain; the latest stored check returned HTTP 521.
- VirusTotal
- 5/91
- Blocklists
- No stored match
- Disponibilidad
- error del servidor · HTTP 521
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
huddle01.finance — error del servidor (HTTP 521). Suplantación de marca: Discord; Tipo de estafa: Brand Impersonation. Resumen de las pruebas: VirusTotal 5/91 (alphaMountain.ai, CRDF, Fortinet, Gridinsoft, Webroot); Spamhaus DBL_PHISH; PhishDestroy score 65/100. Registrador: NiceNIC.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Evidence Digest
huddle01.finance is classified high with an evidence score of 65/100. 5 of 91 security engines flagged the domain. Registration metadata recorded via NiceNIC International Group Co., Limited, hosted on 66.33.60.194 (AMAZON-02 - Amazon.com, Inc., US, US). The latest stored check on 9 Aug 2026 returned HTTP 521 and includes a capture.
Stored generated summary (templated)cerebras · 23/07/2026
Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.
Analysis of huddle01.finance shows a high‑risk brand‑impersonation campaign targeting Discord users. The domain was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is hosted on Cloudflare infrastructure (ASN13335) with the IP address 66.33.60.194 located in the United States. DNS resolution uses the Cloudflare nameservers arnold.ns.cloudflare.com and audrey.ns.cloudflare.com, and the site serves over HTTP/3 with a Google Trust Services / WE1 SSL certificate. An HTTP 521 response indicates that the origin server is unavailable, a pattern often observed in malicious landing pages that rely on Cloudflare’s error handling to obscure content delivery.
The page title returned by the server is "Home – Huddle01's Documentation," which does not reference Discord but may be used to lend an air of legitimacy. Threat intelligence indicates that the domain is actively listed on three security blocklists and has been flagged by PhishDestroy, MetaMask, and SEAL, yet it remains reachable. VirusTotal scans show five of ninety‑one security vendors flagging the domain, and AlienVault OTX references the domain in a single pulse, reinforcing its malicious classification.
The Gridinsoft trust score of 0 out of 100 further underscores the lack of benign reputation. The campaign explicitly impersonates Discord, as indicated by the "Impersonates: discord" tag, suggesting that any phishing pages hosted under this domain likely mimic Discord login flows or notifications to harvest credentials.
Defenders should block the domain at DNS and proxy layers, add the associated IP address to blacklists, and monitor for outbound connections to Cloudflare edge nodes that resolve to 66.33.60.194. Users should be warned that any unsolicited communication referencing Discord that redirects to huddle01.finance is fraudulent.
Cobertura de los datos12 recorded checks
Inteligencia de seguridad de red Registrar context
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 02:43:58 UTC
Tecnologías · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análisis de VirusTotal
Evidencias archivadas
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of huddle01.finance · checked Apr 30, 2026
Datos y informes externosIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.