fi-ca[.]bond

Analysis of the domain fi-ca.bond, observed on July 24 2026, indicates that it was created on 11 December 2025 and is currently offline. The domain is registered through NameCheap, Inc. and resolves to the IP address 207.174.61.1, which is owned by Amazon.com, Inc. (AS16509) and geolocated in the United States. No TLS certificate is presented, meaning HTTP connections would be unencrypted. The authoritative name servers are dns1.registrar-servers.com and dns2.registrar-servers.com. The only publicly visible metadata is the page title “fi-ca.bond is a custom short domain”, which provides no functional description of the site’s purpose.

The domain has been listed by the PhishDestroy blocklist and appears on one additional security blocklist, giving it a minimal but concrete presence in threat-intelligence feeds. Gridinsoft assigns a trust score of 0 / 100, reflecting a high confidence that the host is malicious. VirusTotal analysis shows that four of ninety-five scanned vendors flagged the domain as malicious, confirming that independent scanners have identified suspicious activity. The lack of an SSL certificate, the low trust score, and the presence on blocklists collectively suggest that the domain was used for phishing, even though the exact payload or target brand is not disclosed.

Because the site is offline, active probing is not possible, and the content of the landing page remains unverified. Defenders should continue to block the domain and its associated IP address at perimeter and DNS filtering layers, monitor any future resolution attempts, and consider adding the host to internal blacklist repositories. Ongoing observation of the NameCheap registrar for new domains sharing the same name‑server configuration may reveal related infrastructure. Until further evidence emerges, the domain should be treated as malicious and excluded from legitimate traffic.