web3securityvault[.]net

The domain web3securityvault.net was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 198.251.84.236, which belongs to AS53667 FranTech Solutions in the United States. The site is currently taken offline, but historical telemetry shows it was flagged by multiple security‑focused blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, and appears on four independent security blocklists. The page title observed during the brief window of activity was “Open protocol for connecting Wallets to Dapps,” suggesting an attempt to lure cryptocurrency users. Reputation services assign extremely low scores: Gridinsoft rates the domain 0 out of 100, while Scamadviser reports a 1 out of 100 trust rating.

The SSL certificate is identified as grade E8, indicating weak or misconfigured encryption. On AlienVault OTX the domain is present in one threat‑intel pulse, and VirusTotal reports that 12 of 93 scanning engines flagged the domain as malicious. These combined indicators point to a high‑confidence generic phishing operation targeting wallet users.

Uncertainty remains about the specific payload or credential‑harvesting mechanism, as no detailed page content or malware sample has been released. Defenders should continue to block the domain and its hosting IP, monitor for any re‑hosting attempts, and update detection signatures to include the observed page title and the listed blocklist identifiers. Ongoing surveillance of the ASN and any future registrations from the same registrar is also advised.