# PhishDestroy domain threat record: dappwiseamm.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/dappwiseamm.com/
Machine-readable companion: https://phishdestroy.io/domain/dappwiseamm.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 16:47:55 UTC
- Last availability or vendor check: 2026-10-26 16:47:55 UTC
- Stored record updated: 2026-10-26 19:30:28 UTC
- VirusTotal detections in the stored snapshot: 5/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: flagged

## Stored infrastructure

- Observed IP address: 207.57.188.75
- Registrar in stored WHOIS data: Gname.com Pte. Ltd.
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200
- Registration date (registry RDAP, dappwiseamm.com): 2025-04-08 11:49:44 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1791b-7eb6-7016-bb0a-6754561fed5b/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/dappwiseamm.com
- Certificate Transparency search: https://crt.sh/?q=%25.dappwiseamm.com
- Web Archive lookup: https://web.archive.org/web/*/https://dappwiseamm.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot from 2026-10-26 shows a dark exchange-style landing page carrying the Bitwise name, a banner reading A simple and familiar way to access cryptocurrency, service tiles for Deposit, Withdraw, Lending, AMM, Investments, Copy Trade, C2C and Demo Account, and a bottom navigation bar. PhishDestroy listed dappwiseamm.com after Google Safe Browsing flagged it for social engineering, and the domain was first seen by PhishDestroy on 2026-10-26.

How the scam works
A white modal over the page reads Please download Ult wallet first and states that the website operates on an Ethereum smart contract, paired with a green Confirm button and a small please sign in label. As a category risk, this pattern steers a visitor into installing a wallet chosen by the page and then connecting or signing, which can authorize a malicious contract and place wallet funds at risk of theft.

Evidence
The screenshot shows the Bitwise-branded offer and the wallet-download modal described above. urlscan returned an engine verdict of malicious with an ML score of 21, while its overall verdict was not malicious, and no cross-site redirect was recorded for a fetch that returned HTTP 200. VirusTotal flagged the domain as malicious, with Google Safe Browsing labelling it phishing and LevelBlue calling it phishing, while Cloudflare Radar tagged it phishing and AlienVault OTX held 3 pulses. External blocklists showed 0 listings, a relevant negative, whereas PhishDestroy's own blocklist flagged the domain. Recorded page globals are canvas game-runner code (RunnerClasses, createCanvas, decodeBase64ToArrayBuffer) with no mainstream SPA framework identified, and 16 tracker requests were captured.

Infrastructure
Registered through Gname.com Pte. Ltd. on 2025-04-08 and resolving to NTT America infrastructure, with no WAF or CDN identified in the capture. The notable weaknesses are that Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and COOP/COEP/CORP headers were all absent, HSTS was present only as max-age=31536000 without all subdomains, no email authentication was configured with zero SPF lookups, and DNSSEC is unsigned, while a CAA record is present. Connections negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384, forward secrecy and ALPN h2, and port 3306 was also open alongside the web ports.

What to do
If you connected a wallet, signed a request or submitted data on dappwiseamm.com, stop immediately, revoke any wallet connection, review and revoke token approvals, move remaining assets to a fresh wallet you control, and treat anything entered on the page as compromised. Security teams should block dappwiseamm.com at the proxy, DNS and email layers, hunt for the domain across logs and mail gateways, and monitor for related lookalike registrations.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1791b-7eb6-7016-bb0a-6754561fed5b/
Cloudflare Radar report: https://radar.cloudflare.com/scan/ec757f80-d263-4124-ade9-8bca0ac9c50d
URLQuery report: https://urlquery.net/report/b1b5d06e-4006-4931-932d-d8190941c5d2
Stored capture screenshot: https://i.ibb.co/fdsJXG7P/fdc09297a1d2.png
Cloudflare Radar screenshot (2026-10-26T17:22:28Z): https://screenshots.phishdestroy.io/cf/ec757f80-d263-4124-ade9-8bca0ac9c50d.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/b1b5d06e-4006-4931-932d-d8190941c5d2.png
URLScan screenshot (2026-10-26T16:54:33Z): https://screenshots.phishdestroy.io/us/01a17922-6f82-760e-99c1-082e239fc9b2.png
URLScan capture report: https://urlscan.io/result/01a17922-6f82-760e-99c1-082e239fc9b2/
VirusTotal report: https://www.virustotal.com/gui/domain/dappwiseamm.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=dappwiseamm.com
Revoke token approvals: https://revoke.cash/
Report crypto fraud (Chainabuse): https://www.chainabuse.com/report
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 18:00:26 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/fdsJXG7P/fdc09297a1d2.png
  Captured: 2026-10-26 16:47:55 UTC
- URLScan capture 1: https://urlscan.io/screenshots/01a1791b-7eb6-7016-bb0a-6754561fed5b.png
  Captured: 2026-10-26 16:47:55 UTC
  Source report: https://urlscan.io/result/01a1791b-7eb6-7016-bb0a-6754561fed5b/
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a17922-6f82-760e-99c1-082e239fc9b2.png
  Captured: 2026-10-26 16:54:33 UTC
  Source report: https://urlscan.io/result/01a17922-6f82-760e-99c1-082e239fc9b2/
  SHA-256: d64935781e446870bc1173e6f0afa7f331f498a539e6639049cda5a6f5058095
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ec757f80-d263-4124-ade9-8bca0ac9c50d.png
  Captured: 2026-10-26 17:22:28 UTC
  Source report: https://radar.cloudflare.com/scan/ec757f80-d263-4124-ade9-8bca0ac9c50d
  SHA-256: 5bc3977e7f5928f7718223f6083b695b11a52f5696a4ecb8364aee1eaf947240
- URLQuery: https://screenshots.phishdestroy.io/uq/b1b5d06e-4006-4931-932d-d8190941c5d2.png
  Source report: https://urlquery.net/report/b1b5d06e-4006-4931-932d-d8190941c5d2
  SHA-256: c62e970cfc36774cea86c704724e873490922d358e92b79a4115edce5dcb6e2f

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T17:23:12Z",
        "uuid": "01a1791b-7eb6-7016-bb0a-6754561fed5b",
        "scanned_at": "2026-10-26T16:47:03Z",
        "final_url": "https://dappwiseamm.com/",
        "globals": [
            "assert",
            "getRequiredElement",
            "P",
            "S",
            "getRandomNum",
            "getTimeStamp",
            "Dimensions",
            "Config$2",
            "getGlobalConfig",
            "setGlobalConfig",
            "Config$1",
            "Config",
            "setMaxGapCoefficient",
            "setMaxObstacleLength",
            "Status",
            "A11yStrings",
            "RunnerClasses",
            "RunnerSounds",
            "RunnerEvents",
            "updateCanvasScaling",
            "getA11yString",
            "vibrate",
            "createCanvas",
            "decodeBase64ToArrayBuffer",
            "createAdjustedCollisionBox",
            "drawCollisionBoxes",
            "boxCompare",
            "toggleHelpBox",
            "diagnoseErrors",
            "portalSignin",
            "updateForDnsProbe",
            "getMainFrameErrorCssClass",
            "getMainFrameErrorIconCssClass",
            "getSubFrameErrorIconCssClass",
            "shouldShowSuggestionsSummaryList",
            "getSuggestionsSummaryItemCssClass",
            "reloadButtonClick",
            "downloadButtonClick",
            "detailsButtonClick",
            "setAutoFetchState"
        ],
        "domain_age_days": 566,
        "apex_age_days": 566,
        "requests": 5,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 21,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T17:23:15Z",
        "uuid": "ec757f80-d263-4124-ade9-8bca0ac9c50d",
        "scanned_at": "2026-10-26T17:22:28Z",
        "final_url": "https://dappwiseamm.com/",
        "status": 200,
        "history": [
            {
                "url": "https://dappwiseamm.com/",
                "status": 200
            }
        ],
        "dom_hash": "0dc8f3d9114760f8426c67f29427a4122b771b487cca90810eab747e71fac7ba",
        "doc_hash": "90e7748f5322ee85b3bbc520a5e274131c6881bba598df42f5b120b01f64cce3",
        "phishing_v2": [
            "phishing"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "admin.dappwiseamm.com",
                "type": "A",
                "value": "207.57.188.75"
            },
            {
                "name": "dappwiseamm.com",
                "type": "A",
                "value": "207.57.188.75"
            }
        ],
        "dnssec_valid": false,
        "ip": "207.57.188.75",
        "whois": {
            "registrar": "Gname.com Pte. Ltd.",
            "created": "2025-04-08T11:49:44Z",
            "updated": "2026-04-01T13:16:54Z",
            "expires": "2027-04-08T11:49:44Z",
            "nameservers": [
                "a9.share-dns.com",
                "b9.share-dns.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T17:21:51Z",
        "analysis_at": "2026-10-23T20:44:44Z",
        "stats": {
            "timeout": 0,
            "harmless": 51,
            "malicious": 2,
            "suspicious": 3,
            "undetected": 36
        },
        "detections": {
            "SOCRadar": "suspicious",
            "LevelBlue": "phishing",
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "suspicious",
            "Google Safe Browsing": "phishing"
        },
        "reputation": 0,
        "registrar": "Gname.com Pte. Ltd.",
        "created": "2025-04-08T11:49:44Z",
        "expires": "2027-04-08T11:49:44Z",
        "updated": "2026-09-29T04:08:09Z",
        "first_seen": "2025-04-08T13:29:26Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "a.share-dns.com"
            },
            {
                "ttl": 600,
                "type": "A",
                "value": "207.57.188.75"
            },
            {
                "ttl": 600,
                "type": "SOA",
                "rname": "master.share-dns.com",
                "value": "a.share-dns.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "b.share-dns.net"
            }
        ],
        "dns_at": "2026-10-23T20:46:15Z",
        "jarm": "3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763",
        "cert": {
            "san": [
                "ammbitwisevip.com",
                "ammwood.com",
                "bitwcrypto.com",
                "bitwiseonchain.net",
                "bitwobin.com",
                "dappwiseamm.com",
                "onchainamm.com",
                "onchainbitus.com",
                "onchainbitwise.com",
                "vipammbitwise.net"
            ],
            "issuer": "Let's Encrypt / YR1",
            "serial": "6345a0f09177566f1c6b0f854efe48771bd",
            "sha256": "ca42b8d348cb3a20f68904082894cb4e6dc7b0d4b1508237587bab586bbf4008",
            "subject": "ammbitwisevip.com",
            "valid_to": "2026-12-14T15:04:45Z",
            "valid_from": "2026-09-15T15:04:46Z"
        },
        "whois": {
            "registrar": "Gname.com Pte. Ltd.",
            "registrar_iana_id": "1923",
            "registrar_url": "http://www.gname.com",
            "created": "2025-04-08T11:49:44Z",
            "updated": "2026-04-01T13:16:54Z",
            "expires": "2027-04-08T11:49:44Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "a9.share-dns.com",
                "b9.share-dns.net"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-04-08T11:49:44Z",
                "registration": "2025-04-08T11:49:44Z",
                "last update of RDAP database": "2026-10-20T04:08:11Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T16:51:23Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "dappwiseamm.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T16:49:02Z",
            "first": "2025-04-09T02:13:40Z",
            "changes": 2,
            "days_archived": 3,
            "scans_per_day": 0,
            "avg_page_bytes": 878
        },
        "social_tags": {
            "title": "Bitwise"
        },
        "trackers": {
            "requests": 16
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 97,
                "tls": 175,
                "wait": 176,
                "connect": 177,
                "download": 8
            },
            "response_ms": 633
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                3306
            ]
        },
        "carbon": {
            "bytes": 1194,
            "co2_grams": 0,
            "cleaner_than": 95
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "172.64.53.25",
                    "host": "a.share-dns.com"
                },
                {
                    "ip": "162.159.27.88",
                    "host": "b.share-dns.net"
                }
            ],
            "zone": "dappwiseamm.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "server_name_session",
                    "http_only": true
                },
                {
                    "name": "server_name_session",
                    "http_only": true
                },
                {
                    "name": "angela_session",
                    "http_only": true
                }
            ]
        },
        "location": {
            "ip": "207.57.188.75",
            "asn": "54801",
            "org": "NTT America",
            "city": "San Jose",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR1",
            "subject": "ammbitwisevip.com"
        },
        "dns": {
            "A": [
                "207.57.188.75"
            ],
            "NS": [
                "b.share-dns.net",
                "a.share-dns.com"
            ],
            "SOA": "{\"nsname\": \"a.share-dns.com\", \"hostmaster\": \"master.share-dns.com\", \"serial\": 1787585132, \"refresh\": 3600, \"retry\": 1200, \"expire\": 86400, \"minttl\": 600}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "207.57.188.75",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://dappwiseamm.com"
            ]
        },
        "whois": {
            "registrar": "Gname.com Pte. Ltd.",
            "created": "2025-04-08T11:49:44Z",
            "updated": "2026-04-01T13:16:54Z",
            "expires": "2027-04-08T11:49:44Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "a9.share-dns.com",
                "b9.share-dns.net"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html",
                "strict-transport-security": "max-age=31536000"
            }
        }
    }
}
```