app[.]web3assetsfinance[.]online

Analysis of app.web3assetsfinance.online indicates it is currently active and classified as a generic_phishing threat under investigation. The domain was registered through Porkbun LLC on May 02, 2026 and resolves to IP address 51.75.84.85, which is geolocated to the Czech Republic (Kuchma Oleksandr). Authoritative nameservers are ns1.bthostcore.com and ns2.bthostcore.com. The web service returns HTTP status 200 and presents a TLS certificate issued by Let’s Encrypt (R13). The page title returned is "Web3 Assets Finance | Secure Your Crypto Assets". Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one security blocklist, PhishDestroy. VirusTotal reports that the domain was scanned by 91 vendors with no detections, but this absence does not constitute proof of safety. Concrete evidence of malicious payload or credential collection is not presently available, so the exact nature of the phishing attempt remains uncertain. Defenders should block the domain at the DNS and proxy layers, incorporate the IP address into network threat feeds, continue monitoring for changes in content or infrastructure, and consider sinkholing the host if feasible. Ongoing observation is recommended to determine whether the site evolves into an active credential‑stealing operation.