register-fleek[.]com

This domain is actively impersonating Fleek, a fantasy AI-driven social application, to conduct credential harvesting and account takeover attacks. Analysis indicates the infrastructure is designed to mimic legitimate social platforms, likely targeting users through deceptive login portals or fake promotional offers. The threat actor appears to exploit the growing interest in AI-based social applications to increase the likelihood of successful phishing attempts. Infrastructure analysis reveals multiple high-risk indicators. The domain register-fleek.com was registered on October 01, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious activity. VirusTotal reports 10 out of 95 security vendors flagging this domain as malicious, while it appears on one security blocklist. The domain resolves to Cloudflare IP 2606:4700:3034::6815:e6 (AS13335) and lacks an SSL certificate, further reducing its legitimacy. The page title, 'Fleek | The Fantasy AI Social App,' directly mirrors the branding of the legitimate service, increasing the risk of user deception. Users who visited register-fleek.com should immediately revoke any entered credentials, particularly if login attempts were made. Monitor associated accounts for unauthorized activity, including password reset attempts or unusual transactions. Security teams should block the domain and its resolving IP at the network level. Given the domain's recent registration and active phishing status, organizations should treat any interaction with this infrastructure as a potential compromise and investigate accordingly.