honest-finance[.]org

Analysis of honest-finance.org indicates that the domain is actively being used for generic phishing operations. The domain was registered through NameSilo, LLC on January 01, 2025 and remains active as of the report date, July 27, 2026. DNS resolution points to the IPv4 address 91.235.142.249, and the authoritative name servers are ns21.v-sys.org and ns22.v-sys.org.

The domain appears on a single security blocklist and has been flagged by the PhishDestroy blocklist, confirming that it is recognized by at least one anti‑phishing feed. VirusTotal has processed the domain with scans from 91 vendors; none of the vendors reported a detection at the time of analysis, but the absence of a detection does not imply safety and should be treated as inconclusive. No additional public intelligence sources such as Google Safe Browsing, OTX, or SSL/TLS certificate transparency logs are currently associated with the domain, and no page title or content snapshot has been provided for further verification.

The lack of visible SSL information, HTTP response codes, or trust‑score metrics limits the depth of technical profiling, leaving the exact phishing payload and target brand unconfirmed. Defenders should prioritize adding honest-finance.org to network‑level deny lists, enforce DNS sink‑hole policies for the associated IP address, and monitor traffic to the listed name servers for anomalous query patterns. Continuous re‑evaluation is recommended, as the domain's threat posture may evolve if additional infrastructure or payloads are observed.