web3antivirus[.]net

The domain web3antivirus.net is a cryptocurrency phishing site that impersonates the 1inch brand to trick users into believing it offers a 'Complete Web3 Security Solution.' It poses a brand impersonation threat, specifically targeting cryptocurrency users, and has been taken offline. The site was designed to steal sensitive information or credentials under the guise of a security tool, but no drainer kit was detected. This domain is not safe and is confirmed as a scam.

Technical indicators for web3antivirus.net include detection by 2 of 95 VirusTotal vendors, including alphaMountain.ai and G-Data. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on July 29, 2025, and resolves to IP address 94.181.229.250, located in Russia (AS41727 JSC ER-Telecom Holding). It appears on 2 security blocklists, specifically PhishDestroy and ScamSniffer, and has a Gridinsoft trust score of 0/100. The SSL certificate was issued by R11, and the page title was observed as 'Web3 Antivirus — Complete Web3 Security Solution.' Google Safe Browsing did not flag the domain.

Although web3antivirus.net is now offline, users who interacted with it should take immediate safety steps. Since this is a cryptocurrency brand impersonation phishing site, users should revoke any token approvals granted to the domain and move their funds to a new, secure wallet. If any credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Monitor accounts for unauthorized activity and report the incident to relevant security platforms or law enforcement.