hmm[.]pnckswp[.]finance

The domain hmm.pnckswp.finance, a phishing platform, has been flagged by 10 out of 95 VirusTotal vendors, indicating its malicious nature. Although the site is currently offline, it was initially detected by PhishDestroy on October 3, 2025. Google Safe Browsing has also flagged this domain, adding another layer of validation to its threat status.

Registered through Cloudflare, Inc., this domain was hosted on the IP address 104.21.45.2, located in the United States. The lack of an SSL certificate suggests a rudimentary setup, which is common in phishing operations aiming for quick deployment and exploitation. The domain's page title, "404 Not Found," indicates that it has been taken down, but its previous activity was significant enough to be included in a public blocklist curated by PhishDestroy.

Phishing domains like hmm.pnckswp.finance often exploit the critical 24-72 hour window between domain registration and appearance in antivirus databases. This domain's presence on Google Safe Browsing and its detection by multiple security vendors highlight its potential impact during its active phase. While the domain is no longer operational, its detection and subsequent takedown underscore the importance of rapid threat identification and response.