dapp[.]xdao[.]info

On July 23 2026, the domain dapp.xdao.info was observed to have been taken offline. The domain was registered on 21 February 2026 through GoDaddy.com, LLC and is delegated to four Amazon Route 53 name servers: ns-1796.awsdns-32.co.uk, ns-785.awsdns-34.net, ns-1244.awsdns-27.org, and a fourth entry truncated in the source data. DNS resolution points to the Amazon‑owned address 13.228.250.208, which belongs to ASN 16509 (Amazon.com, Inc.) and is geolocated in Singapore. The site presented an HTTPS certificate issued by Let’s Encrypt (certificate identifier E8) and was served by Nginx. The page title returned by the HTTP response was “XDAO”.

Independent analysis by VirusTotal recorded that two of ninety‑three scanners flagged the domain, indicating some malicious indicators, while the remaining scanners reported no detection. Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on three public blocklists, specifically PhishDestroy, MetaMask, and SEAL. The observed scam type is classified as an investment scam, consistent with the generic phishing categorisation. Evidence suggests the infrastructure was purpose‑built for credential harvesting or financial deception, leveraging a legitimate‑looking TLS certificate and a common web server stack.

The offline status prevents immediate interaction, but the persistence of the DNS records and the low trust score imply that the operators may reactivate the site or clone the domain elsewhere. Defensive recommendations include adding the domain and its associated IP address to local deny lists, monitoring the four Amazon name servers for re‑registration of the domain, and employing URL filtering that references the known blocklists. Continuous re‑scanning of the domain on VirusTotal and other multi‑engine platforms is advised to capture any changes in detection status.