app[.]fuel-network[.]live

The domain app.fuel-network.live was registered on February 21, 2026 through Web Commerce Communications Limited and is served by the name servers ns100.webnic.cc and ns101.webnic.cc. Infrastructure analysis shows the domain resolves to IP address 45.9.148.51, which is advertised as belonging to AS49447 Nice IT Services Group Inc. and is geolocated in the Netherlands. The site presented a page titled "Claim Your Share of the Arbitrum Ecosystem | Up to $25,000 for Active Wallets", directly targeting the Arbitrum brand and promoting a cryptocurrency‑related incentive. The SSL certificate associated with the host is identified as type R11, indicating a standard TLS layer without additional trust signals.

Operational status is currently offline, and the domain has been taken down from public access. Defensive intelligence indicates the domain was blocked by PhishDestroy and appears on a single security blocklist. VirusTotal scans recorded five detections out of ninety‑three vendor engines, reinforcing the malicious classification. The campaign is characterized as a crypto scam employing brand impersonation of Arbitrum to lure users into claiming alleged rewards.

While the page content has not been captured, the combination of registrar data, hosting attribution, SSL profile, and detection counts provides sufficient confidence to label the domain as malicious. Defenders should continue to block the domain at network perimeters, update local blocklists with the observed IP and name server entries, and monitor for any re‑registration attempts that reuse the same infrastructure. Further investigation of any residual traffic may reveal additional campaign artifacts, but the current evidence set is adequate for immediate mitigation.