# app-resolv.xyz — SUSPICIOUS

> PhishDestroy identifies app-resolv.xyz as a crypto-wallet phishing domain resolving to 188.114.96.3. Check the full report.

## Summary
PhishDestroy has identified app-resolv.xyz as a fraudulent login-page domain actively used to harvest crypto wallet credentials. The threat is classified as a high-risk fake-login phishing attack due to its recent creation and deployment in the wild. Security analysts classify this as a credential-harvesting site targeting cryptocurrency users.  This domain was flagged by six independent security blocklists including Codeesura, Polkadot, MetaMask, ScamSniffer, and SEAL. It resolves to IP 188.114.96.3 and uses a Let’s Encrypt SSL certificate to appear legitimate. Registered on December 25, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED, its low detection rate on VirusTotal (0 out of 95 engines) suggests it remains under the radar despite active abuse.  To mitigate exposure, users should avoid visiting app-resolv.xyz and immediately rotate any wallet credentials entered on similar pages. Block the domain at DNS or firewall level using IP 188.114.96.3 and 188.114.96.0/24. Report wallet interactions via ScamSniffer or MetaMask phishing channels to help block propagation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-25 07:53:33
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 6 hits
  Lists: ["Codeesura", "Polkadot", "MetaMask", "ScamSniffer", "SEAL", "Enkrypt"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/app-resolv.xyz
- PhishDestroy: https://phishdestroy.io/domain/app-resolv.xyz/
- LLM endpoint: https://phishdestroy.io/domain/app-resolv.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/app-resolv.xyz/
Last updated: 2026-04-06