fixedfloa-t[.]org

On April 4, 2026, PhishDestroy flagged fixedfloa-t.org as an active fake-prize scam domain designed to harvest credentials and financial details from unsuspecting visitors.

This domain is freshly registered—created March 31, 2026—yet has already begun live operations, resolving to the IP address 176.125.242.151. It leverages a free Let’s Encrypt SSL certificate to appear legitimate. Current sandbox analyses report zero detections out of 95 engines on VirusTotal, and it is not yet listed on any major threat intelligence feeds. The domain was registered through DYNADOT LLC, a registrar known for both legitimate and bulletproof hosting services, which complicates takedown efforts. No historical blocklist presence or reputation data is available at this time, placing it in a blind-spot window of early-stage abuse.

Organizations and end users should immediately block fixedfloa-t.org at the network and endpoint levels using DNS filtering, firewall rules, or endpoint protection platforms. Users who may have accessed the site should assume their data could have been compromised; reset passwords on any accounts shared after visiting the domain, enable MFA where available, and monitor financial accounts for unauthorized transactions. Report any sightings to phishing response teams and consider submitting the domain to threat intelligence platforms to accelerate its detection and remediation.