vulcanblockchain[.]net

This domain, vulcanblockchain.net, operates as a credential phishing site targeting users of Web3 infrastructure services. Analysis of the page content reveals an imitation of Vitruveo’s webhook platform, designed to deceive developers or users into submitting authentication details, private keys, or API credentials under false pretenses. The site employs a legitimate-appearing interface with references to Web3 workflows, increasing the likelihood of successful social engineering against blockchain developers or project administrators. Infrastructure analysis reveals multiple indicators of malicious intent. The domain was registered on March 29, 2026, through GoDaddy.com, LLC, with an SSL certificate issued by the same registrar. It resolves to the IP address 15.197.225.128 and is flagged by 3 out of 95 security vendors on VirusTotal. Detection systems such as PhishDestroy and OISD have already classified it as malicious, and it appears on two independent security blocklists. The Gridinsoft trust score of 0/100 further corroborates its classification as a high-risk resource. Users who accessed vulcanblockchain.net should immediately revoke any credentials or API keys entered on the site. All affected accounts should be audited for unauthorized access, particularly those tied to blockchain wallets or smart contract deployments. Browser sessions should be cleared, and endpoint devices scanned for malware. Network-level blocking of the domain and its associated IP (15.197.225.128) is recommended to prevent further exposure. Organizations should monitor for follow-up phishing attempts leveraging stolen credentials.