fi-ae[.]store

The domain fi-ae.store was registered on February 21, 2026 through IONOS SE and is hosted on the IP address 217.160.0.186, which belongs to AS8560 operated by IONOS in Germany. The authoritative nameservers listed are ns1037.ui-dns.biz, ns1105.ui-dns.com, ns1117.ui-dns.org, and ns1123.ui-dns.de. No SSL certificate is present, and the site currently returns an offline HTTP status, indicating that the service is not reachable at the time of analysis.

The domain has been blocked by multiple anti‑phishing services, including PhishDestroy, MetaMask, and SEAL, and appears on three independent security blocklists. VirusTotal scans show that four of ninety‑five security vendors flagged the domain as malicious, reinforcing the suspicion of malicious intent. The primary threat classification is generic phishing, specifically credential harvesting, as indicated by the blocklist entries and the absence of legitimate content.

Uncertainty remains regarding the exact phishing kit or targeted brand because no page title, brand reference, or kit identifier has been disclosed in the available intelligence. Defenders should add the domain and its hosting IP to network and email filtering rules, monitor for any re‑appearance on blocklists, and consider sharing the indicator with threat‑intelligence sharing platforms. Continuous observation of the domain’s DNS records is advised, as changes could indicate a re‑activation attempt.