xweb3.network

Reputation checks show the domain appears on three independent security blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal recorded six detections out of ninety‑four submitted scanners, confirming malicious classification by a subset of vendors. The Gridinsoft trust score is 0 out of 100, reinforcing the low credibility assessment. The site was categorized as an investment scam, targeting users with promises related to the “X Token” concept.

While the offline status prevents active probing, the lack of an SSL certificate, the recent creation date, and the low trust score suggest a short‑lived malicious campaign. Uncertainty remains regarding the exact payload delivered to victims, as no sample URLs or malicious scripts have been disclosed. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the same IP address or Cloudflare nameserver pair, and update endpoint detection rules to flag the identified Smartsupp and Cloudflare Browser Insights signatures. Ongoing collection of any malicious payloads or phishing emails referencing “X Token” will be required to refine detection and response capabilities.