firstbonline[.]icu

The domain firstbonline.icu is currently active and poses a risk as a generic phishing site. It is involved in a government impersonation scam, where it may trick users into providing sensitive information. As of the latest assessment, 15 of 95 vendors on VirusTotal flag this domain as malicious, and it appears on 1 security blocklist, specifically PhishDestroy. The site is not flagged by Google Safe Browsing, but users should exercise caution as the risk level is elevated.

firstbonline.icu was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 19, 2026. The domain resolves to the IP address 172.67.186.242, which is located in CA and is associated with Cloudflare, Inc. The SSL certificate for the site is issued by Let's Encrypt / E7. The domain has a Gridinsoft trust score of 0/100, indicating a lack of trustworthiness. Technologies detected on the site include Cloudflare Browser Insights, Cloudflare, and HTTP/3. The page title observed is 'Just a moment...' and the HTTP status is 403, suggesting that access is restricted or the site is under active development or maintenance.

To protect against the potential risks associated with firstbonline.icu, users should avoid providing any personal or financial information. If any credentials have been compromised, it is crucial to change passwords and enable two-factor authentication on affected accounts. Users should also monitor their accounts for any signs of unauthorized activity or fraud. To report this phishing domain, individuals can submit it to PhishTank, the Anti-Phishing Working Group, or their preferred security vendor for further analysis and action.