dappmigrappv3[.]my

Analysis of dappmigrappv3.my confirms it was a short-lived social-media phishing domain impersonating Discord. The domain was registered on February 21, 2026, and has since been taken offline. Infrastructure analysis reveals it resolved to 104.21.32.1, an address within Cloudflare’s US network (AS13335), a common hosting choice for both legitimate services and phishing campaigns. The SSL certificate was issued by WE1, a provider frequently used by low-effort threat actors. At the time of detection, the page title displayed 'Swap | Jupiter', suggesting an attempt to mimic a cryptocurrency swap interface, likely to harvest credentials or wallet details.

The domain appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. Gridinsoft assigned a trust score of 0/100, reinforcing its classification as malicious. Three of 95 security vendors on VirusTotal flagged the domain before it was deactivated. No evidence links it to a known phishing kit or specific threat actor group. The exact content and functionality of the site remain unanalysed, as the domain is no longer accessible.

Defenders should treat any prior resolution of dappmigrappv3.my as a confirmed phishing indicator. Historical DNS logs, proxy logs, and endpoint telemetry should be reviewed for connections to 104.21.32.1 or the domain itself. Security teams are advised to update blocklists and alert users who may have interacted with the site before its takedown. Given the use of Cloudflare and a low-trust SSL issuer, similar domains should be scrutinised for identical infrastructure patterns.