xweb3[.]info

The domain xweb3.info was a generic phishing site posing as a decentralized finance (DeFi) scam, specifically targeting users with a fraudulent 'X Token' offering. It did not impersonate a known brand or deploy a crypto drainer kit, but its content was designed to deceive victims into disclosing sensitive information or transferring assets. As of the latest verification, xweb3.info has been taken offline, though its prior activity warrants caution for those who may have interacted with it.

Technical analysis of xweb3.info revealed limited but notable detection. The domain was flagged by 1 of 95 VirusTotal security vendors and appeared on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 20, 2026, it resolved to the IP address 172.67.147.47, hosted by Cloudflare in Canada. No SSL certificate was present, and the observed page title was 'X Token'. Technologies detected included Smartsupp, Cloudflare Browser Insights, and HTTP/3, with nameservers cortney.ns.cloudflare.com and vicente.ns.cloudflare.com.

Individuals who visited xweb3.info should take immediate steps to secure their accounts and assets. For cryptocurrency users, revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet. Those who entered credentials should change passwords on all platforms where the same credentials were used and enable two-factor authentication (2FA). Report the domain to relevant authorities, such as the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org or local cybercrime units, to aid in tracking and mitigating further threats.