dapplayerwallet[.]xyz

Analysis of dapplayerwallet.xyz indicates that the domain was registered on 16 September 2025 through OwnRegistrar, Inc. and resolves to the Cloudflare address 172.67.192.117, which is associated with ASN 13335 in the United States. No TLS certificate is presented; HTTP requests return a generic “Just a moment…” title, suggesting a placeholder or redirect page rather than a fully deployed site. The domain is currently taken offline, but historical scans show it was active enough to be flagged by multiple security services. VirusTotal records show nine of ninety‑five AV engines detecting malicious behavior, and the domain appears on four independent blocklists. It has also been explicitly blocked by the PhishDestroy, Polkadot, Enkrypt, and Codeesura filtering platforms.

AlienVault OTX lists dapplayerwallet.xyz in a single threat pulse, reinforcing its association with malicious activity. Gridinsoft assigns a trust score of zero out of one hundred, indicating a high likelihood of abuse. The only documented scam type is “Crypto Scam,” consistent with a crypto‑drainer operation that typically attempts to steal cryptocurrency private keys or redirect wallet transactions. Because the site does not serve HTTPS, any credential submission would be exposed to interception.

The absence of a known phishing kit or detailed payload limits attribution, and the page content beyond the title has not been captured. Defenders should continue to deny resolution to 172.67.192.117 for this hostname, add the domain to internal blocklists, and monitor for re‑registration or similar sub‑domains that might reuse the same infrastructure. Ongoing DNS telemetry and periodic re‑scanning with multi‑engine services are recommended to detect any resurgence. Given the combination of low trust score, multiple blocklist listings, and the presence in an OTX pulse, the domain should be treated as a high‑confidence indicator of a crypto‑drainer threat.