dappsresolver-protocol[.]xyz

Analysis of dappsresolver-protocol.xyz indicates that the domain is actively used for a phishing operation and is currently under investigation. The domain was registered on July 27, 2026 through NameSilo, LLC and resolves to the IP address 188.114.96.3. DNS resolution is provided by the Cloudflare nameservers bingo.ns.cloudflare.com and conrad.ns.cloudflare.com, which are commonly leveraged by threat actors to obscure hosting details. The domain appears on a single security blocklist and has been flagged by the PhishDestroy blocklist, confirming its presence in at least one reputable anti‑phishing repository.

VirusTotal records show that the site has been scanned by 91 vendor engines, with none reporting a detection at the time of analysis; however, the absence of detections does not imply safety and should be interpreted as a lack of current signatures rather than a clean bill of health. No additional intelligence such as SSL certificate details, HTTP response codes, page titles, or brand targeting is presently available, leaving the content of the landing page undefined. Infrastructure indicators, including the use of a Cloudflare edge and a relatively new registration date, align with patterns observed in fast‑flux and short‑lived phishing campaigns.

Defenders should block the domain at the network perimeter, update DNS filtering policies to deny resolution of the associated IP, and monitor for any outbound connections to 188.114.96.3. Continuous re‑scanning on multi‑vendor platforms is advised to capture any future payloads or indicator changes. Organizations employing email or web security gateways should add the domain to their deny lists and consider sharing the indicator set with threat‑sharing communities to improve collective detection capabilities.