fnmarket[.]org

This domain is flagged as a generic phishing threat with a high risk level and remains active as of the report date. The domain was registered on July 2, 2026, through Global Domain Group LLC, and its nameservers are a.dnspod.com, b.dnspod.com, and c.dnspod.com. It resolves to IP address 158.94.211.169. VirusTotal shows 3 out of 91 security vendors flagging the domain, indicating moderate but not universal detection across the security community. The domain was created only 13 days before this report, which is a common pattern for phishing infrastructure used for short-lived campaigns. It is uncertain what brand or specific lure the phishing site employs, as no page title, brand target, or scam type is present in the available intelligence. Defenders should treat this domain as malicious based on the phishing classification, the high risk level, and the recent registration date. Recommended actions include blocking the domain and its associated IP at network boundaries, monitoring for any email or web traffic attempting to reach fnmarket.org, and reviewing logs for any connections to 158.94.211.169. The use of Chinese-based nameservers (dnspod) is a technical indicator that may assist in threat hunting for related infrastructure. No further details about the page content, kit, or targeted brand are available at this time.