360fxfinancialservices[.]com

Analysis of 360fxfinancialservices.com shows a high‑risk generic phishing infrastructure that remains active as of July 27, 2026. The domain was registered on June 08, 2024 through the registrar TUCOWS.COM, CO., and currently resolves to the IP address 104.21.66.244, which is hosted on Cloudflare’s network. Nameserver queries return dimitris.ns.cloudflare.com and vita.ns.cloudflare.com, confirming the use of Cloudflare DNS services.

The domain appears on one external security blocklist and is explicitly blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing source has identified it as malicious. VirusTotal scanning recorded a single positive detection out of 91 security vendors, reinforcing the suspicion that the site is being used for phishing despite limited vendor consensus. No additional public indicators such as SSL certificate details, HTTP response codes, page titles, or content snapshots have been disclosed, leaving the exact payload and victim‑targeting tactics unverified.

Given the registrar’s lack of stringent abuse controls, the Cloudflare hosting, and the confirmed blocklist presence, defenders should immediately add 360fxfinancialservices.com and its resolving IP 104.21.66.244 to network deny lists, enforce DNS filtering for the domain, and monitor for any traffic to the associated Cloudflare nameservers. Continuous re‑evaluation is advised, as further detection by additional vendors or emergence of page‑level evidence could elevate the threat profile. Organizations should also consider threat‑intel sharing of this indicator with partners to broaden defensive coverage.