fsasvg[.]com

This domain, fsasvg.com, is flagged as an active phishing site targeting the St. Vincent and the Grenadines Financial Services Authority, as indicated by its page title and confirmed threat classification. Infrastructure analysis reveals the domain was registered on February 21, 2026, through a hosting provider associated with frequent abuse, and it currently resolves to an IPv6 address (2a02:4780:84:27e5:b6a8:5bc8:91f9:a732) under AS47583, a network with a history of hosting malicious activity. The domain uses nameservers ns1.dns-parking.com and ns2.dns-parking.com, a pattern commonly observed in low-reputation or bulletproof hosting setups. A Let's Encrypt SSL certificate is present, which is typical for both legitimate and malicious sites, offering no inherent security assurance. Two of 93 security vendors on VirusTotal have detected this domain as malicious, and it appears on at least one security blocklist. The site is built using WordPress, a content management system frequently exploited due to its widespread use and plugin vulnerabilities. Additional technologies detected include PHP, MySQL, and front-end libraries such as jQuery and Swiper, which are not inherently malicious but are often leveraged in phishing kits to create convincing facades. The domain's Gridinsoft trust score of 38/100 further supports its high-risk classification. While the exact content and functionality of the site remain unanalyzed, the combination of infrastructure indicators, registration details, and detection by security vendors confirms its role in a phishing operation. Defenders should treat this domain as compromised and implement blocking measures at the DNS, IP, and certificate levels. Monitoring for related domains registered under the same provider or nameserver patterns is recommended to identify potential lateral movement or backup infrastructure.