finlithpay[.]com

The domain finlithpay.com carries an elevated risk level and has been identified as a generic phishing threat, specifically designed to mimic the legitimate Flitpay service. This is not a typical scam but a carefully crafted impersonation aimed at stealing cryptocurrency login details from unsuspecting users. The site has since been taken offline, but the threat remains active as similar domains may appear.

According to available intelligence, only 2 out of 95 security vendors flagged this domain on VirusTotal, indicating low initial detection. The domain was registered through NiceNIC International Group Co., Limited and created on February 21, 2026. It resolves to IP address 172.67.130.238 and uses an SSL certificate from Google Trust Services / WE1. Despite appearing on only one security blocklist, the low vendor detection and recent creation date underscore the need for caution.

Users who may have encountered finlithpay.com should immediately change their Flitpay passwords and enable two-factor authentication if not already active. Avoid entering any credentials on lookalike domains, and always verify URLs by typing them directly into the browser. PhishDestroy recommends checking any suspicious links through its verification service before interacting with them. Monitoring financial accounts for unauthorized transactions is also advised.