v2-thruster[.]fi

v2-thruster.fi is currently active and classified as a generic_phishing site. The domain was registered on 21 February 2026 and resolves to IP 216.198.79.1, which belongs to AS16509 Amazon.com, Inc. and is geolocated in the United States. DNS resolution is handled by Cloudflare nameservers marek.ns.cloudflare.com and veronica.ns.cloudflare.com, and the site serves traffic over Cloudflare’s edge network with HTTP/3 enabled. The web server presents a TLS certificate issued by Google Trust Services under the WE1 identifier, indicating a valid SSL chain but offering no assurance of legitimacy. The page title returned by the host is "Thruster Finance", and no additional content has been publicly disclosed. Reputation services have flagged the domain: PhishDestroy lists it as blocked, the Gridinsoft trust score is 0/100, and three of ninety-three VirusTotal scanners have reported malicious activity. The domain appears on one external blocklist. Given the phishing classification, the presence of a legitimate-looking certificate, and the low trust scores, defenders should add the domain and its resolving IP to deny-list rules, monitor for any future resolution changes, and consider sinkholing traffic where possible. Ongoing observation is advised because the site’s internal structure and credential-capture mechanisms have not been publicly examined.