crypweb3networks[.]org

Analysis of crypweb3networks.org indicates a confirmed phishing domain targeting Coinbase users, classified as a wallet/seed phishing scam. The domain was registered on July 3, 2025, through OwnRegistrar, Inc., and resolved to IP address 172.245.14.131 (AS36352 HostPapa, US). No SSL certificate was present, increasing the risk of unencrypted credential interception. The page title, 'Home - WalletconnectWeb3 - A crypto buy and sell marketplace,' suggests an attempt to impersonate a cryptocurrency exchange or wallet service, aligning with the reported scam type.

Detection data shows the domain was flagged by 5 of 95 security vendors on VirusTotal and appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. Scamadviser assigned a trust score of 1/100, further corroborating its malicious nature. The domain is currently offline, but its infrastructure remains a potential threat vector.

Defenders should treat this domain as high-risk and ensure it is blocked at the DNS and proxy levels. Historical WHOIS and passive DNS records should be reviewed to identify any related infrastructure or campaigns. Given the domain's association with wallet/seed phishing, users who may have interacted with it should be advised to audit their cryptocurrency wallets for unauthorized transactions or compromised seed phrases.