whitelist-falcon[.]com

This domain, whitelist-falcon.com, is flagged for credential theft targeting users of financial platforms. The site mimics Falcon Finance, presenting a login or profile interface designed to harvest usernames, passwords, and other sensitive account details. Visitors may be tricked into entering credentials under the false pretense of accessing a legitimate financial service, leading to unauthorized account access or identity fraud.

Analysis indicates the domain was registered on September 17, 2025, through ERANET INTERNATIONAL LIMITED, a registrar frequently associated with malicious infrastructure. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious, while it appears on two independent security blocklists. The domain resolved to IP address 188.114.97.3 and has since been taken offline, though residual risks may persist for users who interacted with it prior to deactivation.

If you visited whitelist-falcon.com or entered any credentials, immediately reset passwords for all financial and email accounts associated with the information provided. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor accounts for suspicious transactions or login attempts, and report any anomalies to the affected service providers. Avoid reusing passwords across platforms, and consider scanning devices for malware if files were downloaded or scripts executed during the visit.