tinkerfcu[.]us[.]com

The domain tinkerfcu.us.com was registered on May 29, 2026 through Instra Corporation Pty Ltd. It resolves to the IP address 104.21.86.115, which belongs to a Cloudflare network located in Canada. The authoritative name servers are ns1‑ns4.centralnic.net. A Let's Encrypt certificate (E8) is active, indicating recent HTTPS provisioning.

Infrastructure analysis shows the site returns HTTP status code 502, suggesting a misconfigured or offline backend service. The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy. Despite the presence on a blocklist, the Gridinsoft trust score is 0 out of 100, reinforcing the low reputation.

VirusTotal scans have reported 0 detections out of 95 engines, meaning the current payload or landing page has not yet been flagged by automated scanners. This lack of detection does not confirm benign intent; the classification as generic_phishing is based on observed behavior patterns and the blocklist entry.

Defenders should treat tinkerfcu.us.com as a potential phishing vector. Recommended actions include adding the domain to outbound web filters, monitoring DNS queries for the domain and its associated IP, and reviewing any user reports of credential‑harvesting attempts. Because the site is hosted behind Cloudflare, direct IP blocking may be ineffective, so domain‑level controls are advisable.

Uncertainty remains regarding the exact content served at the URL, as the 502 response prevents content retrieval. Continuous observation is required to detect any changes in HTTP response or new detections on threat intelligence platforms. The domain’s recent creation date and low trust score suggest it was likely deployed for a short‑term campaign.