MALICIOUS — CRITICAL
fwcuag[.]com
This domain impersonates the well-known cryptocurrency exchange Binance, posing a significant risk of brand impersonation.
- VirusTotal
- 13/93
- Blocklists
- 1 · ScamSniffer
- التوفر
- المحتوى غير متوفر · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
fwcuag.com — المحتوى غير متوفر (HTTP 502). انتحال العلامة التجارية: Binance; نوع الاحتيال: Crypto Scam. ملخص الأدلة: VirusTotal 13/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 3 alerts; 1 external blocklist match (ScamSniffer); PhishDestroy score 95/100. مسجّل النطاق: Gname.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
fwcuag.com Fake Binance Alert
fwcuag.com is flagged as a brand impersonation threat targeting Binance. It was created on February 21, 2026, and 13/95 security vendors detect it.
This domain impersonates the well-known cryptocurrency exchange Binance, posing a significant risk of brand impersonation. Such sites are often used to trick users into revealing sensitive information, such as login credentials or personal data, by mimicking the look and feel of legitimate Binance pages.
Analysis indicates that fwcuag.com was created on February 21, 2026, and is currently flagged by 13 out of 95 security vendors on VirusTotal. The domain resolves to the IP address 101.33.21.144 and appears on two security blocklists, including ScamSniffer and PhishDestroy. The registrar is Gname.com Pte. Ltd., and the Gridinsoft trust score for this domain is 0 out of 100, indicating a very high level of suspicion.
If a user has visited fwcuag.com, they should immediately check their Binance account for any unauthorized activity. It is recommended to change passwords and enable two-factor authentication (2FA) if it is not already active. Users should also monitor their financial transactions and report any suspicious activity to Binance customer support. To avoid similar threats in the future, always verify the URL of the website before entering any sensitive information and use trusted security tools to detect potential risks.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
نطاق تغطية البيانات12 recorded checks
استخبارات أمن الشبكات
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | fwcuag.com |
malicious | Sinkholed |
| DNS4EU | www.trx-tron.net |
malicious | Sinkholed |
| Hagezi Threat Feed | www.trx-tron.net |
malicious | Sinkholed |
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
تحليل VirusTotal
الأدلة والتقارير الخارجيةIndependent lookups and source reports
PD-20260204-2B017B Recipient: as139341_abuse@aceville.net Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.