connectweb3verse.com için kimlik avı ve güvenlik kontrolü

The domain connectweb3verse.com was registered on 18 January 2026 through COSMOTOWN, INC. and is hosted on a Hetzner server in Germany (IP 157.90.1.27). The site currently returns an offline status, but historical scans show it served a page titled “Connect Hub” built with PHP, Three.js, Chart.js, Bootstrap and LiteSpeed, and exposed a JivoChat widget over HTTP/3. No TLS certificate was observed, indicating traffic was unencrypted.

The infrastructure uses four shambhost.com nameservers (ns1‑ns4.shambhost.com) and carries a Gridinsoft trust score of 0/100, reflecting a complete lack of reputation. VirusTotal recorded four detections out of ninety‑one vendor scans, and the domain appears on a single public blocklist that is actively enforced by PhishDestroy. The only confirmed malicious activity is an investment‑scam campaign, as indicated by the intelligence tag “Investment Scam”.

Evidence of the specific lure or victim interaction is not available, and the page content has not been captured in detail. Defenders should block the domain and its associated IP address at perimeter and DNS layers, monitor for any future resolution to the Hetzner range, and add the nameservers to any internal watchlists. Given the zero trust score and existing blocklist entry, the domain should be treated as high‑confidence malicious, and any inbound traffic to the host should be denied until the operator is confirmed inactive.