dapp-labs[.]xyz

The domain dapp-labs.xyz was identified as a phishing site engaged in brand impersonation, specifically targeting users of the Ledger cryptocurrency wallet. This domain was designed to deceive users by mimicking trusted branding and interface elements, posing an elevated risk of credential theft or fraudulent activity. As of the latest assessment, dapp-labs.xyz has been taken offline and is no longer accessible.

Technical analysis shows that dapp-labs.xyz was created on February 21, 2026, and resolves to the IP address 104.21.3.117, which is registered under AS13335 Cloudflare, Inc. in the US. The site used an SSL certificate issued by WE1 and displayed the page title 'Dapp Web Node.' VirusTotal reports that 2 of 95 vendors, including Gridinsoft and Trustwave, detected this domain as malicious. The domain appears on four security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. Additional trust metrics indicate a Gridinsoft trust score of 0/100 and a Scamadviser trust score of 1/100. The registrar information is not available.

Anyone who interacted with dapp-labs.xyz, especially those who may have entered Ledger wallet credentials, should immediately change their passwords, enable two-factor authentication, and monitor accounts for unauthorized activity. Users are advised to report any suspicious activity or phishing attempts to the impersonated brand (Ledger) and relevant security authorities. Taking these steps can help mitigate potential losses and prevent further compromise.