freceky[.]org

The domain freceky.org was registered on November 08, 2025 through NameCheap, Inc. and is hosted on Cloudflare infrastructure, resolving to IP address 172.67.154.214 within ASN 13335 (Cloudflare, Inc.) located in the United States. The site does not present an SSL certificate, which is atypical for a service purporting to handle cryptocurrency assets. The page title observed is "USDC," and the campaign explicitly targets the Binance brand, employing a wallet/seed phishing approach.

Google Safe Browsing has flagged the domain for social engineering, and a Gridinsoft trust assessment assigned a score of 0 out of 100, indicating no perceived legitimacy. VirusTotal analysis reports that three of ninety‑five security vendors flagged the domain as malicious, and the domain appears on a single public blocklist. PhishDestroy has taken the site offline, and its current status is listed as offline.

The combination of a brand‑impersonation page title, lack of TLS, low trust score, and vendor detections suggests a coordinated attempt to harvest Binance wallet credentials or seed phrases. Defenders should block DNS resolution for freceky.org, add the associated IP 172.67.154.214 to network‑level deny lists, and monitor for similar Cloudflare‑hosted domains that lack TLS and reference cryptocurrency terms. Continuous verification against threat intelligence feeds is recommended to capture any re‑hosted variants that may emerge using the same registrar or nameserver pattern.