web3insuredvault[.]com

PhishDestroy has identified the domain web3insuredvault.com as part of an active brand impersonation phishing campaign. The domain specifically targets users of the Across protocol, a cross-chain interoperability platform, by mimicking its branding to deceive visitors into revealing sensitive information. As of the latest check, the domain is offline, but its previous activity posed a significant risk to users.

The domain was registered through NameSilo, LLC and created on September 04, 2025. It resolves to IP address 91.218.246.231. VirusTotal analysis shows only 1 out of 95 security vendors flag the domain, indicating low initial detection but still a risk. The domain appears on 4 security blocklists. No SSL certificate was associated with the site, marking it as insecure for data transmission. These technical indicators, combined with the low vendor detection rate, suggest the domain was designed to evade standard security filters during its active period.

Given that the domain is now offline, the immediate threat is contained. However, users should remain vigilant against similar domains that may appear. PhishDestroy recommends that users who may have visited web3insuredvault.com change their passwords for any accounts associated with Across protocol and enable two-factor authentication. Always verify the legitimacy of websites by checking SSL certificates and the exact URL before entering personal information. Report any suspicious domains to relevant security teams.