web-3web[.]com

The domain web-3web.com was registered on February 10, 2026 through GMO Internet, Inc. and presently resolves to the IP address 103.147.154.221. DNS records show authoritative name servers ns1.domainesia.net and ns2.domainesia.net, indicating the use of a third‑party DNS provider. As of the report date, the domain remains active and continues to resolve, suggesting the infrastructure is still operational. VirusTotal scans have identified the domain as malicious in 2 of 91 security vendor engines, providing a modest but concrete indication of phishing‑related activity.

Independent threat‑intelligence feeds have placed the domain on a single security blocklist, and it is explicitly listed as blocked by the PhishDestroy service, confirming that at least one anti‑phishing organization has taken action against it. No public information is available regarding the website’s page title, SSL certificate details, or the specific content hosted, leaving the exact phishing lure and target brand undefined. Consequently, the precise technique employed (e.g., credential harvesting page, credential‑stealing redirect) cannot be confirmed without direct content analysis.

Defenders should prioritize immediate mitigation: add web-3web.com and its resolving IP 103.147.154.221 to network‑level blocklists, update DNS filtering policies to deny queries for the domain, and monitor for any related sub‑domains or infrastructure changes. Continuous re‑scanning of the domain through multi‑vendor services is advised to capture any escalation in detection counts. Given the recent creation date and limited detection footprint, the threat remains high due to its active status and confirmed phishing classification, warranting proactive blocking and ongoing observation.