fowg[.]fun

The domain fowg.fun is currently active and classified as a generic_phishing threat with a high risk rating. Infrastructure analysis shows the domain resolves to the IP address 172.67.156.101, which is hosted by Cloudflare, Inc. in Canada. The site presents a TLS certificate issued by Google Trust Services under the WE1 designation, and its authoritative name servers are amber.ns.cloudflare.com and decker.ns.cloudflare.com. An HTTP request returns a 403 status code, and the page title reported by scanners is "Just a moment...". The domain was registered on March 27, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Security telemetry indicates that PhishDestroy has blocked the domain, it appears on one public blocklist, and AlienVault OTX references it in a single threat pulse. VirusTotal scans show that 2 of 94 security vendors have flagged the domain. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. While the exact phishing content has not been captured, the presence of a generic phishing classification, active blocklist entries, and low trust scores suggest a credible threat. Defenders should consider blocking both the domain and its resolved IP, updating intrusion detection signatures to include the observed name server pattern, and monitoring for related activity in Cloudflare‑hosted ranges. Continuous re‑evaluation is advised as additional threat intelligence may emerge.