acoount-girocash[.]fun

The domain acoount-girocash.fun has been identified as a credential phishing site targeting GiroCash users. Analysis confirms the domain is currently offline, though prior activity suggests it was designed to harvest financial login credentials through fraudulent account verification prompts. No legitimate association with GiroCash or its parent entities was found. Infrastructure analysis reveals the domain was registered through HOSTINGER operations, UAB, with a creation date of May 24, 2026. It resolved to the IP address 88.222.222.203 and was flagged by 4 of 95 security vendors on VirusTotal. Additional detection sources include three independent security blocklists, while trust assessment platforms assigned a score of 0/100. The domain has been actively blocked by multiple threat mitigation systems, including MetaMask, PhishDestroy, and SEAL. Current status indicates the domain has been taken offline, though residual risk remains for users who may have interacted with it during its active period. Organizations are advised to update web filtering rules to block the domain and associated IP address. Users should verify any prior communications requesting GiroCash credentials and report suspicious activity to their financial institution. Network administrators should monitor for connections to 88.222.222.203 and review logs for potential exposure.