mainnetv3[.]world

This domain, mainnetv3.world, is identified as a high-risk phishing site designed to impersonate Backpack, a cryptocurrency wallet platform. The site poses a direct threat to users by presenting a fraudulent interface that mimics legitimate wallet login or transaction pages, likely aiming to harvest sensitive credentials, private keys, or seed phrases. Such attacks often lead to unauthorized access and irreversible asset theft, particularly in decentralized finance environments where transactions are irreversible. Analysis indicates the domain was registered on July 13, 2025, through OwnRegistrar, Inc., a registrar frequently associated with malicious domain registrations. The site resolves to the IP address 142.250.80.68, though this IP is also linked to legitimate services, underscoring the sophistication of the campaign. Security vendors on VirusTotal flagged the domain, with 12 out of 95 engines detecting it as malicious. Additionally, the domain appears on five security blocklists, including those maintained by Polkadot, Codeesura, PhishDestroy, ScamSniffer, and Enkrypt, further confirming its malicious intent. Users who visited mainnetv3.world should immediately cease all interactions with the site. If credentials or private keys were entered, affected individuals must transfer assets to a new, secure wallet and revoke any connected dApp permissions. Monitor accounts for unauthorized transactions and enable multi-factor authentication where available. Report the domain to relevant security teams or platforms to aid in broader mitigation efforts. Given the domain’s current offline status, users should remain vigilant for similar phishing attempts using variations of the domain name or targeting the same brand.