smartchainline[.]web[.]app

This domain, smartchainline.web.app, is actively engaged in a high-risk phishing campaign designed to impersonate a legitimate Web3 support portal. Analysis indicates the site mimics official cryptocurrency or decentralized application support interfaces, likely aiming to harvest user credentials, private keys, or other sensitive authentication details. The page title, 'Web3 Support Portal,' reinforces the deception by presenting itself as a trusted resource for blockchain-related assistance, increasing the likelihood of user interaction under false pretenses. Infrastructure analysis reveals the domain is registered through Google LLC and resolves to the IP address 199.36.158.100, located in the United States. The SSL certificate, issued by Google Trust Services (WR4), provides a veneer of legitimacy, though it does not mitigate the underlying malicious intent. Detection metrics show limited but concerning coverage, with only 1 out of 95 security vendors flagging the domain on VirusTotal. However, the domain appears on three independent security blocklists, and it is actively blocked by multiple threat intelligence feeds, including those integrated into browser-based cryptocurrency wallets. The combination of low detection rates and high-risk targeting underscores the sophistication of this campaign. Users who have visited smartchainline.web.app or interacted with its content are advised to take immediate corrective action. Any credentials, private keys, or recovery phrases entered on the site should be considered compromised and revoked without delay. Affected individuals should transfer assets to new, secure wallets and monitor connected accounts for unauthorized transactions. System scans using updated security tools are recommended to detect potential secondary infections. Due to the domain's continued activity, users should remain vigilant against similar phishing attempts and verify the authenticity of any support portals before disclosing sensitive information.