fundinggateways[.]com

PhishDestroy identifies fundinggateways.com as an active credential theft domain designed to trick users into surrendering login details under the guise of a crypto funding platform. This site masquerades as a legitimate gateway service, luring victims with promises of easy access to cryptocurrency resources while silently harvesting credentials for misuse. Security researchers have observed this domain operating since its February 2, 2025 creation date, with threat actors leveraging common registrar Namecheap Inc. to establish their infrastructure quickly and at low cost. This domain was flagged by exactly 1 out of 95 VirusTotal security vendors at the time of analysis, indicating low but concerning detection rates that could leave some users vulnerable. The domain resolves to IP address 37.49.229.75 and holds a legitimate-looking SSL certificate issued by Let's Encrypt, which helps it appear trustworthy to unsuspecting visitors. The combination of recent domain creation, low detection rates, and deceptive branding specifically targeting cryptocurrency users creates an elevated risk environment that demands immediate caution from anyone considering entering login credentials. If you've visited fundinggateways.com, immediately check any accounts where you may have entered credentials and enable two-factor authentication where possible. Avoid using the same passwords across different platforms, as credential theft often leads to broader account compromise. Report this domain to your security team or use PhishDestroy's verification tools to check any future interactions. Never enter sensitive information on sites you haven't independently verified through official channels.