vault-v3[.]world

This domain, vault-v3.world, is flagged as an active investment scam site with high-risk indicators. Registered on March 2, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, it remains operational as of July 12, 2026. Infrastructure analysis reveals Cloudflare hosting (AS13335) with nameservers woz.ns.cloudflare.com and evangeline.ns.cloudflare.com, resolving to 172.67.201.232. The site presents a page title of FASTPANEL, suggesting an attempt to impersonate or exploit the FASTPANEL brand, though the exact content and functionality remain unconfirmed due to lack of direct analysis. A 301 HTTP redirect is present, which may indicate traffic redirection to a secondary malicious endpoint. Security vendors have detected this domain, with 7 of 93 flagging it as malicious on VirusTotal. It appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, reinforcing its classification as an active threat. The domain's SSL certificate is issued by Let's Encrypt, a common practice among both legitimate and malicious sites to avoid browser warnings. Detected technologies include Cloudflare Browser Insights and HTTP/3, typical of modern web infrastructure but also leveraged by threat actors for evasion. Defenders should treat this domain as confirmed malicious. Block access at the network level, including DNS and IP-based filtering for 172.67.201.232. Monitor for connections to the domain or associated IP in logs, particularly those involving financial transactions or credential submission. Given the investment scam classification, prioritize alerts for users accessing this domain from corporate or financial environments. No evidence currently links this domain to a specific phishing kit or additional infrastructure, so further investigation into redirect chains or associated domains is recommended.