web3trustsec[.]com[.]globuspillar[.]com

PhishDestroy identifies web3trustsec.com.globuspillar.com as a live, high-risk cryptocurrency wallet phishing domain actively distributing under the guise of a ‘Web3 Trust Security’ service. The site lures victims with fake security scans or wallet verification pages to harvest private keys or seed phrases, enabling direct theft of cryptocurrency assets. Given its recent creation, lack of detection, and infrastructure alignment with known phishing behaviors, this domain represents an immediate threat to users engaging with Web3 services. This domain was flagged with a threat type of ‘generic_phishing’ and assigned a status of ‘active’. It resolves to IP address 198.251.88.6 and was created on February 22, 2026 — a mere two days prior to this assessment. The domain is registered through Global Domain Group LLC, a registrar known to accommodate high-risk or short-lived domains. VirusTotal currently shows 0 detections out of 95 scanners, and it holds a valid Let’s Encrypt SSL certificate, enhancing its credibility. Despite no current presence on major blocklists (e.g., PhishTank, OpenPhish, URLVoid), the combination of age, registrar reputation, IP reputation (associated with prior malicious activity), and SSL issuance creates a deceptive yet operationally prepared phishing infrastructure. The seed hash a225b6 confirms this is part of a monitored campaign. Users should immediately block access to this domain via network-level filters or browser settings. Under no circumstances should private keys, seed phrases, or login credentials be entered on this site. If exposed, users must revoke wallet access via blockchain explorers or official wallet software, transfer remaining funds to a new, secure wallet, and audit all connected dApps. Organizations are advised to update blocklists using this domain and IP, deploy DNS filtering, and warn staff about fake Web3 security portals. Given the rapid evolution of crypto-based threats, continuous monitoring and threat intelligence feeds are recommended to prevent similar attacks. Stay vigilant — newly registered domains with SSL and zero detections are prime vectors for credential and asset theft.