fwcdcentdesktop[.]app

The domain fwcdcentdesktop.app is a generic phishing site posing as a firmware update portal for the D'CENT hardware wallet. It does not impersonate a specific consumer brand or deploy a known crypto drainer kit, but its page title, 'FWU D'CENT Desktop App — Official Firmware Update Download,' is designed to trick users into downloading malicious software under the guise of a legitimate update. As of the latest verification, fwcdcentdesktop.app has been taken offline and is no longer accessible.

Technical indicators confirm the elevated risk level of fwcdcentdesktop.app. The domain was flagged by 3 of 95 security vendors on VirusTotal, including Fortinet, Gridinsoft, and SOCRadar. It appears on one security blocklist, PhishDestroy, and was registered through NiceNIC International Group Co., Limited on February 21, 2026. The domain resolves to the IP address 216.150.1.1, hosted on Amazon.com, Inc.'s AS16509 in the US. No SSL certificate is present, and the nameservers are albert.ns.cloudflare.com and roxy.ns.cloudflare.com. Google Safe Browsing has not flagged the domain.

Users who may have interacted with fwcdcentdesktop.app should take immediate safety steps. If credentials or wallet information were entered, change passwords immediately and enable two-factor authentication on all related accounts. Monitor accounts for unauthorized transactions or signs of fraud. For crypto wallets, revoke any token approvals granted during the suspected compromise and consider transferring funds to a new wallet. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts.