secure[.]momentum-funding[.]com

The domain secure.momentum-funding.com was identified as a credential phishing site targeting banking login credentials. It did not impersonate a specific well-known brand but operated as a generic banking phishing page. The site is currently taken offline, reducing immediate risk, though prior exposure may still pose a threat to users who entered sensitive information.

Technical indicators confirm the elevated risk level. Secure.momentum-funding.com was flagged by 3 of 95 VirusTotal security vendors, including ChainPatrol, alphaMountain.ai, and SOCRadar. It appeared on one security blocklist (PhishDestroy) and had a Gridinsoft trust score of 0/100. The domain was registered through Dynadot LLC on October 31, 2013, and resolved to the IP address 199.59.243.228, hosted on Amazon.com, Inc. (AS16509) in the US. No SSL certificate was present, and the observed page title was 'momentum-funding.com'. Nameservers were ns1.dyna-ns.net and ns2.dyna-ns.net.

Users who interacted with secure.momentum-funding.com should immediately change passwords for any accounts entered on the site, particularly banking or financial logins. Enable two-factor authentication (2FA) on all critical accounts to prevent unauthorized access. Monitor bank statements and credit reports for signs of fraudulent activity. Report the phishing domain to Google Safe Browsing, the Anti-Phishing Working Group (APWG), and local cybercrime authorities to aid in takedown efforts.