web3-crypto[.]xyz

The domain web3-crypto.xyz was registered on February 21, 2026 through Squarespace Domains II LLC and remains active as of July 12, 2026. Its HTTP response is a 307 redirect and it presents an SSL certificate identified as R11. The site’s page title reads “Web3-Crypto – Enterprise Crypto Payment Solutions”, a generic heading that does not directly reference the targeted brand.

Technical resolution shows the domain points to IP 66.33.60.35, which belongs to AS16509 owned by Amazon.com, Inc. The hosting environment is identified as Vercel, and the site enforces HTTP Strict Transport Security. MX records list smtp.google.com with priority 1, indicating the use of Google’s mail infrastructure. Gridinsoft assigns a trust score of 0/100, and the domain appears on a single security blocklist. VirusTotal scans flag the domain by 2 of 95 security vendors. The domain is already blocked by the PhishDestroy network.

Analysis of the page content shows no direct use of the Near brand logo, but the site claims to deliver “Enterprise Crypto Payment Solutions”, a phrase commonly employed by Near‑related cryptocurrency phishing campaigns. The impersonation classification is supported by an AlienVault OTX pulse linking the domain to Near brand abuse. The high‑risk rating derives from the combination of brand targeting, cryptocurrency lure, and low trust indicators such as the Gridinsoft score and limited detection coverage.

Defenders should add web3-crypto.xyz to outbound and inbound block lists, enforce DNS sink‑hole redirection, and monitor for any email traffic using the smtp.google.com MX record that references the domain. Because the site uses Vercel and a legitimate Amazon IP range, network‑level blocklists may miss it; rule‑based filtering on the domain name and the observed page title is advised. Continuous re‑scanning with VirusTotal and other multi‑engine services is recommended to capture any changes in detection coverage.