# falcon9stock.com — SUSPICIOUS

> Explore the active phishing threat posed by falcon9stock.com, a low-risk domain linked to fraudulent stock schemes.

## Summary
PhishDestroy has identified falcon9stock.com as an active domain involved in generic phishing activities. The domain appears to be used to deceive users by impersonating financial or stock-related services, potentially aiming to harvest sensitive information. Although the risk level is assessed as low, caution is advised given its phishing classification.

The domain falcon9stock.com was registered recently on June 3, 2025, through Ultahost, Inc., a registrar sometimes associated with disposable or suspicious domain registrations. It resolves to the IP address 45.42.40.116. VirusTotal analysis detects a single security vendor flagging this domain among 95 scanned, indicating limited but notable suspicion. The domain’s infrastructure and recent creation date suggest it might be part of a newly emerging phishing campaign leveraging financial themes.

Currently, falcon9stock.com remains active and continues to pose a phishing risk. Users and security teams should monitor any communications originating from or directing to this domain. It is recommended to block access to this domain in corporate and personal environments until further intelligence clarifies its intent or activity. Continuous vigilance and updated threat intelligence feeds will help mitigate potential exposure to scams linked to this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Falcon9 Stock | Home

## Domain Intelligence
- Registered: 2025-06-03 12:13:25
- Registrar: Ultahost, Inc.
- Country: US
- IP: 45.42.40.116
- Nameservers: ns1.ultahost.com ns2.ultahost.com ns3.ultahost.com ns4.ultahost.com

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://urlscan.io/screenshots/019d01bf-211b-74bc-81e0-30b9c796166b.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/d86ce181-0054-46a0-8736-7906e8f8836a
- PhishDestroy: https://phishdestroy.io/domain/falcon9stock.com/
- LLM endpoint: https://phishdestroy.io/domain/falcon9stock.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/falcon9stock.com/
Last updated: 2026-03-19