measurefunds[.]org

The domain measurefunds.org was registered on May 20, 2025 through the HOSTINGER operations, UAB registrar. Its authoritative nameservers are ns3.ddoscure.com and ns4.ddoscure.com, and DNS resolution points to the IPv4 address 178.32.82.176. VirusTotal analysis shows that six out of ninety‑one security vendors have flagged the domain, indicating a non‑trivial detection rate among reputable scanners. The domain is currently listed on a single public security blocklist and has been explicitly blocked by the PhishDestroy filtering service, confirming that at least one defensive platform has taken remediation action.

No additional intelligence such as SSL certificate details, HTTP response codes, Safe Browsing verdicts, or Open Threat Exchange (OTX) entries is available in the supplied data set. Consequently, the full extent of the phishing infrastructure, including any associated landing pages or credential‑harvesting mechanisms, remains unverified. Defenders should prioritize adding measurefunds.org to outbound web‑filter policies and DNS‑sinkhole configurations to prevent client connections.

Continuous monitoring of DNS queries for the 178.32.82.176 address is advised, as any shift in hosting or additional IP associations could signify scaling of the campaign. Organizations using threat‑intelligence feeds should ensure the domain is ingested from the existing blocklist entry and corroborate the six vendor detections with internal sandboxing or URL‑lookup tools. Given the domain’s recent creation date and active status, proactive blocking combined with periodic re‑evaluation of its reputation is recommended to mitigate potential credential‑theft or data‑exfiltration attempts.