fn-stat[.]com

Analysis indicates that fn-stat.com was registered on 20 June 2026 via Gransy, s.r.o. and uses DNSPod name servers a.dnspod.com, b.dnspod.com, c.dnspod.com. The domain resolves to the IPv4 address 158.94.211.169 and remains active as of the report date. The classification assigned is generic_phishing, suggesting the site may be used to harvest credentials or other sensitive information. No public threat intelligence beyond the registration details has been observed; the website content has not been examined, and no malware payloads have been linked to the host. VirusTotal has recorded scans by 91 vendors without generating detections, but the absence of alerts does not confirm benign intent. Uncertainty remains regarding the actual campaign infrastructure, targeted brands, and whether the domain is currently serving malicious pages. Defenders should monitor DNS queries for the domain, block HTTP/HTTPS traffic to 158.94.211.169 at the network perimeter, and incorporate the domain into threat‑intel feeds for future correlation. Continuous re‑assessment is advised, especially if new samples or phishing emails referencing fn-stat.com appear.