# connect.web3backuphub.com — MALICIOUS

> connect.web3backuphub.com is a credential theft phishing domain. VirusTotal flags 9/95 vendors. Avoid entering any credentials. Reported by PhishDestroy.

## Summary
PhishDestroy identifies active credential theft infrastructure at connect.web3backuphub.com. This domain was flagged by 9 out of 95 VirusTotal security vendors and blacklisted by Google Safe Browsing under the SOCIAL_ENGINEERING category, indicating high confidence in malicious intent.  This domain was registered through Spaceship, Inc., resolves to IP 86.107.77.119, and holds a valid Let’s Encrypt SSL certificate. It was created on December 20, 2025, making it a recently deployed threat vector. The combination of low detection ratio, absence of reputation, and recent registration suggests a focused, short-lived campaign targeting Web3 users through impersonated backup services.  Mitigation requires immediate avoidance of this domain and any associated links or forms. Users who may have entered credentials should revoke access to connected applications immediately and change passwords across all services using the same or similar login details. Organizations should block the domain at DNS and firewall levels and monitor for related infrastructure. Always verify URLs before entering sensitive information and use password managers that flag known phishing domains.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-20 20:56:20
- Registrar: Spaceship, Inc.
- IP: 86.107.77.119

## Detection Status
- VirusTotal: 9 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/cb1763e4-d2f9-4410-86f1-82e80d905bda
- PhishDestroy: https://phishdestroy.io/domain/connect.web3backuphub.com/
- LLM endpoint: https://phishdestroy.io/domain/connect.web3backuphub.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/connect.web3backuphub.com/
Last updated: 2026-03-26