fnite[.]icu

Analysis of fnite.icu indicates an active phishing domain under investigation as of July 31, 2026. The domain was registered on May 25, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to IP address 158.94.211.169. Infrastructure review shows nameservers a.dnspod.com, b.dnspod.com, and c.dnspod.com, suggesting use of DNSPod services, which are commonly associated with domains involved in malicious activity. As of the latest scan, 91 security vendors on VirusTotal report no detections for this domain; however, the absence of detections does not confirm safety, particularly given the domain's recent registration and active status.

The domain appears on one security blocklist and is currently blocked by PhishDestroy, indicating prior identification as potentially malicious by at least one security provider. No additional context regarding the specific phishing campaign, targeted brand, or scam type is available at this time. The domain's content has not been analyzed, and no page title or kit details are provided.

Defenders should treat fnite.icu as a potential threat based on its registration characteristics, hosting infrastructure, and presence on a security blocklist. Recommended actions include monitoring network traffic for connections to 158.94.211.169 or fnite.icu, implementing local blocklist entries if not already covered by existing security controls, and reviewing logs for any prior interactions. Further investigation is required to determine the domain's exact purpose and associated risks.