fiwgod[.]fun

Analysis of fiwgod.fun shows a high‑risk generic phishing infrastructure that remains active as of the report date, July 22, 2026. The domain was registered through GoDaddy.com, LLC on July 06, 2026 and resolves to the IP address 2.24.198.130, using the authoritative nameservers ns17.domaincontrol.com and ns18.domaincontrol.com. Reputation checks indicate that the domain appears on three security blocklists and is actively blocked by at least three enforcement services: PhishDestroy, MetaMask, and SEAL.

VirusTotal records confirm that the domain has been scanned by 91 antivirus and URL‑reputation vendors, with none of those scanners raising a detection at the time of assessment. Although the absence of detections does not constitute validation of safety, the concentration of blocklist entries and the dedicated blocking by multiple security products suggest a deliberate phishing campaign.

Defenders should immediately add fiwgod.fun to network‑level deny lists, ensure DNS filtering solutions block both the domain and its resolving IP, and monitor for any changes in the hosting environment or additional blocklist listings. Continuous observation of the IP 2.24.198.130 for new malicious activity is advised, as well as periodic re‑scanning with threat‑intel platforms to capture any future payloads or URL modifications that may appear.