futchfinance[.]com

The domain futchfinance.com was registered on 31 December 2023 through Hosting Concepts B.V. d/b/a Registrar.eu. It resolves to the Cloudflare‑hosted address 104.21.54.170 and uses the Cloudflare nameservers clara.ns.cloudflare.com and tanner.ns.cloudflare.com. Threat intelligence classifies the site as a generic phishing infrastructure and assigns it a high risk rating. The domain appears on at least one public blocklist and has been added to the PhishDestroy blocklist, meaning that network‑level defenses that rely on these feeds should already be dropping traffic to it.

VirusTotal scans show that two of ninety‑one security vendors flagged the domain, confirming that a subset of security products recognize it as malicious. No additional public detections such as Google Safe Browsing, OTX, or other reputation feeds are currently documented. Details about the site’s SSL certificate, HTTP response codes, page title, or landing‑page content have not been published, so the exact appearance and any brand impersonation remain unknown.

Defenders should continue to block the IP address 104.21.54.170 and the associated Cloudflare nameservers, enforce DNS‑level deny lists that include futchfinance.com, and monitor for new indicators that may emerge in URL‑reputation services. Because the infrastructure is hosted on a major CDN, attribution to a specific actor is difficult, but the recent registration, active blocklisting, and limited detection coverage suggest an ongoing campaign that may target users seeking financial services. Organizations are advised to educate users about unsolicited communications referencing finance‑related domains and to require verification of URLs before credential entry.