web3filter[.]info

Analysis as of July 23 2026 shows that web3filter.info was registered on February 21 2026 and currently resolves to the IP address 216.198.79.65, which belongs to Amazon.com, Inc. (AS16509) located in the United States. The site presented the page title “Decentralized Solution Platform” and carried an SSL certificate identified as R13. The domain is associated with a fake airdrop campaign that impersonates the Across brand, classifying it as a brand‑impersonation threat.

Defensive telemetry indicates that four independent blocklists—PhishDestroy, Polkadot, Enkrypt and Codeesura—have already listed the domain, and a Gridinsoft trust score of 0 / 100 reinforces its malicious reputation. VirusTotal analysis recorded detections from 13 of 93 scanning engines, confirming that a notable subset of security vendors consider the domain malicious. The infrastructure appears to be hosted on a cloud provider, which may facilitate rapid redeployment if the current instance is taken offline.

As of the report date the domain is marked offline, but the underlying IP and hosting assets remain active and could be reused for future campaigns. Defenders should proactively block the domain and its resolving IP at perimeter and DNS filters, add the four blocklist identifiers to internal threat feeds, and monitor for any resurgence of the R13 SSL certificate on new hostnames. Continuous observation of Amazon‑hosted address ranges for similar fake‑airdrop or Across‑related activity is advised, and any new sightings should be escalated to incident response teams for containment.