fcsr[.]online

Analysis of the domain fcsr.online indicates it is being used for a banking‑focused phishing campaign. The site presented the page title "fcsr - Online Banking Platform," which aligns with the classified scam type of Banking Phishing. The domain was registered on 21 February 2026 through Global Domain Group LLC and is protected by a Let’s Encrypt R12 certificate, indicating the use of a free SSL provider. DNS resolution points to the IPv4 address 163.61.188.9, which is announced by AS153568 NEW DHAKA HARDWARE and geolocated to the United States. The hosting environment runs LiteSpeed web server software and the front‑end leverages Bootstrap, jQuery (including CDN and UI components), FancyBox, Popper, and the Smartsupp live‑chat widget, suggesting a relatively standard web‑development stack.

The domain is currently offline, and the hosting provider’s nameservers are listed as dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting.com. Detection metrics show that two of ninety‑three VirusTotal scanners flagged the domain, and it appears on a single external blocklist, indicating that some security products have identified malicious activity. The Gridinsoft trust score of 30 out of 100 further reflects a low confidence rating. PhishDestroy has already added the domain to its blocklist, providing an additional layer of protection for end users. Uncertainties remain regarding the full scope of the phishing infrastructure, such as any additional command‑and‑control servers or the volume of harvested credentials.

No public Safe Browsing or Open Threat Exchange (OTX) entries are referenced in the available intelligence, and no detailed content analysis of the landing page is provided beyond the title. Defenders should block resolution of fcsr.online at the network perimeter, add the domain and its IP address 163.61.188.9 to reputation‑based deny lists, and monitor for any outbound traffic to the associated nameservers.