firstworld-creditunion[.]online

Analysis of firstworld-creditunion.online indicates a confirmed brand‑impersonation operation targeting the foundation brand. The domain was registered on February 21, 2026 through Global Domain Group LLC and resolves to the IPv4 address 163.61.188.5, which is assigned to AS153568 NEW DHAKA HARDWARE in the United States. An SSL certificate identified as R12 is present, but its short validity and lack of a reputable issuer suggest a low‑trust configuration. The HTTP response returned the page title "Home - First World Credit Union," matching the registered domain name and reinforcing the impersonation narrative.

Gridinsoft assigned a trust score of 0 / 100, and the domain appears on one security blocklist. Independent threat‑intel feeds have flagged the site; PhishDestroy lists it as blocked, and VirusTotal reports that 2 of 95 scanned security vendors flagged the domain as malicious. The current operational status is offline, but historical presence on blocklists indicates that the site was previously reachable and potentially used to harvest credentials or disseminate fraudulent content.

Defenders should ensure that the IP address 163.61.188.5 is denied at perimeter filters, add the domain to internal URL blocklists, and monitor for any new domains registered by the same registrar that exhibit similar naming patterns or SSL characteristics. Continuous observation of AS153568 traffic is advised, as the hosting entity may support additional malicious infrastructure. Given the low trust score, existing blocklist entries, and confirmed brand‑impersonation intent, the domain should be treated as high‑risk until a definitive takedown confirmation is received.