fwa-treasury[.]fun

The domain fwa-treasury.fun is currently listed as an active generic phishing site with an elevated risk rating. VirusTotal analysis shows that three out of ninety‑one AV and URL‑reputation engines have flagged the domain, indicating partial consensus among security products that the site exhibits malicious behavior. Independent blocklist monitoring confirms that the domain appears on three separate security blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services.

No additional public intelligence—such as registrar details, IP address attribution, SSL certificate information, HTTP response codes, Safe Browsing status, or page title metadata—has been released for this host, leaving the underlying hosting infrastructure and content specifics unverified. This lack of deeper attribution creates uncertainty around the exact phishing vector employed and the potential credential or asset theft mechanisms in use.

Defenders should prioritize immediate containment by adding fwa-treasury.fun to DNS‑level and proxy‑level blocklists, ensure endpoint security solutions reference the latest blocklist feeds, and monitor network logs for any outbound connections to the domain. Continuous re‑evaluation is advised as further telemetry becomes available, especially any changes in detection vendor counts or emerging blocklist entries that could clarify the threat’s operational scope.