io-web3[.]live

The domain io-web3.live was observed hosting a page titled "Parking Page" and is currently listed as offline. Infrastructure analysis shows the domain resolves to IP address 54.149.79.189, which is owned by Amazon.com, Inc. (ASN 16509) and geolocated in the United States. The domain uses the nameservers launch1.spaceship.net and launch2.spaceship.net, indicating reliance on a third‑party DNS provider. No SSL certificate is deployed, so HTTPS connections are not available.

The site was flagged by PhishDestroy and appears on a single external blocklist, confirming that at least one security feed has identified it as malicious. Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating, further suggesting a high likelihood of abusive activity. VirusTotal reports indicate that the domain was scanned by 95 antivirus and URL‑filtering vendors, none of which returned a positive detection; this absence of detections does not constitute a safety assurance, as the domain’s behavior may evade existing signatures. The known intelligence classifies the operation as an "Investment Scam" that impersonates the WordPress brand, implying that any content previously served likely attempted to lure victims into fraudulent financial schemes under the guise of a legitimate WordPress service.

Because the site is presently offline, active monitoring should focus on the hosting IP and associated ASN for any re‑deployment of malicious payloads, and on the registered nameservers for future DNS changes. Defensive measures for organizations include adding the IP 54.149.79.189 and the domain io-web3.live to blocklists, enforcing DNS filtering that denies resolution of this host, and reviewing inbound traffic logs for attempts to contact the domain prior to its takedown. Analysts should also watch for related domains that share the same nameserver pair or ASN, as threat actors often reuse infrastructure.