new-dappconnect[.]net

This domain, new-dappconnect.net, operates as a crypto wallet drainer designed to impersonate legitimate decentralized application (DApp) connection services. The site employs social engineering tactics to trick users into linking their cryptocurrency wallets, enabling attackers to siphon funds through malicious smart contract interactions. Analysis indicates the domain specifically targets users of blockchain-based platforms, exploiting the trust associated with DApp connectivity to execute unauthorized transactions and asset theft. Infrastructure analysis reveals multiple high-confidence indicators of compromise. The domain was registered on May 31, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. It resolves to the IP address 104.21.81.14 and is currently offline, though prior activity was observed. Security vendors on VirusTotal flagged the domain at a rate of 8/95, while it appears on three distinct security blocklists. Detected technologies include Cloudflare and HTTP/3, which are commonly used to obfuscate malicious infrastructure and evade detection. Users who visited new-dappconnect.net should immediately revoke any wallet permissions granted to the site via their wallet provider’s interface. All connected wallets should be audited for unauthorized transactions, and remaining funds should be transferred to a new, secure wallet. Additionally, users should monitor for phishing attempts via email or messaging platforms, as attackers may attempt follow-up campaigns. If financial loss occurred, report the incident to relevant blockchain analytics services and local cybercrime authorities for further investigation.