phinexglobalinvestment[.]com

Analysis of phinexglobalinvestment.com indicates an active malicious infrastructure targeting users through a generic phishing campaign. The domain was registered on March 14, 2026 via Tucows Domains Inc. and is served by the authoritative nameservers vda6200a.trouble-free.net and vda6200b.trouble-free.net. DNS resolution points to the IPv4 address 69.10.43.179, which remains reachable as of the report date (July 27, 2026).

VirusTotal records show that 1 of 91 security vendors flagged the domain, providing the only explicit detection signal in the available dataset. The domain appears on a single external blocklist and is currently listed as blocked by the PhishDestroy service, confirming that at least one security vendor has taken remediation action. No additional public indicators such as SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts are present in the intelligence feed, leaving those aspects unverified.

The limited detection coverage—one vendor flag and a single blocklist entry—suggests that broader community awareness may be low, increasing the risk of exposure for unprotected endpoints. Defenders should prioritize adding phinexglobalinvestment.com and its associated IP address (69.10.43.179) to DNS and network blocklists, monitor for any new resolution changes, and consider sharing the indicator with threat‑sharing platforms to improve collective visibility. Continuous re‑evaluation is recommended, as further analysis of the web content or additional vendor scans could reveal expanded tactics, techniques, and procedures.