feewebs[.]vip

feewebs.vip has been identified as a phishing domain hosting a fraudulent login portal designed to harvest user credentials. This domain mimics legitimate web services to trick victims into entering sensitive information such as usernames, passwords, or financial details. The threat actors behind this campaign are likely using social engineering tactics, such as deceptive emails or messages, to direct users to the malicious site. Once credentials are submitted, they are exfiltrated to attacker-controlled servers, enabling follow-on attacks like account takeovers or identity theft. This domain was flagged by 12 out of 95 security vendors on VirusTotal, indicating a high likelihood of malicious activity. It was registered through Gname.com Pte. Ltd. on August 12, 2025, and resolves to IP address 104.21.57.54. The domain also holds an SSL certificate issued by Google Trust Services, which may lend it an air of legitimacy to unsuspecting users. The combination of a recent creation date and low detection rates among security vendors suggests this is an emerging threat with potential for rapid expansion. If you have visited feewebs.vip or entered any credentials on the site, immediately change passwords for the affected account and enable multi-factor authentication where possible. Scan your device for malware using reputable antivirus software, as the domain may also deliver payloads like keyloggers or ransomware. Report the domain to your IT security team or use tools like browser-based phishing alerts to help block further access. Avoid interacting with unsolicited communications referencing this domain until further investigation is complete.