cryptoweb3[.]app

Domain cryptoweb3.app was flagged by PhishDestroy for hosting a generic crypto drainer phishing kit, designed to siphon digital assets from unsuspecting users. The domain mimics legitimate Web3 platforms to deceive victims into connecting crypto wallets or entering credentials, enabling fund theft. No specific brand impersonation was identified in initial scans, but the drainer mechanism is actively embedded in the site's frontend logic.

This domain resolves to IPv4 address 104.21.34.117 and was registered through Dynadot LLC on December 21, 2025. It utilizes a Google Trust Services SSL certificate and remains undetected on VirusTotal, showing 0/95 detection engine flags. The domain is currently active and under investigation, with no inclusion in major blocklists at this time. As of the latest scan, the site is accessible and operational, indicating ongoing malicious activity.

While the immediate risk remains under evaluation due to low detection rates, the presence of a crypto drainer kit necessitates caution. Users are advised to avoid interactions with this domain and to verify its status using PhishDestroy’s real-time threat database. Security teams should monitor the associated IP (104.21.34.117) and domain for updates. Remaining risk is classified as active but mitigated through continuous monitoring, with no definitive brand targeting confirmed. Immediate remediation actions include domain takedown requests and IP-based blocking where applicable.