fagalert[.]fun

The domain fagalert.fun was registered on June 2, 2026 through GoDaddy.com, LLC and uses the default GoDaddy nameservers ns69.domaincontrol.com and ns70.domaincontrol.com. DNS resolution points to the IPv4 address 2.24.198.130, which remains active as of the report date. Threat intelligence feeds have placed the domain on three public blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL.

VirusTotal analysis shows that four of ninety‑five scanning engines flag the domain as malicious, indicating a consensus of suspicion among a minority of vendors. The available data do not include a page title, SSL certificate details, HTTP response codes, or any identified branding, so the specific content and lure employed by the site cannot be confirmed at this time. Infrastructure analysis is limited to the registrar, nameserver configuration, and IP address; no additional host‑level artifacts such as open ports or service banners have been reported.

Defenders should prioritize adding fagalert.fun to DNS filtering rules and ensure that outbound connections to 2.24.198.130 are denied or monitored. Monitoring of the IP reputation on threat‑intel platforms is advised, as further malicious activity may be observed. Given the high‑risk rating and the presence on multiple blocklists, organizations should treat any email or message referencing this domain as potentially hostile and enforce strict verification of any credential‑submission attempts that reference the domain.