appchainresolverr[.]xyz

The domain appchainresolverr.xyz was registered on October 09, 2025 through NameSilo, LLC and is currently taken offline. DNS resolution is handled by Cloudflare name servers cora.ns.cloudflare.com and vick.ns.cloudflare.com, pointing to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. in the United States. No TLS certificate is presented for the site, confirming the lack of HTTPS support at the time of observation. Cloud‑based reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, indicating a high confidence of malicious intent.

VirusTotal analysis reports that six of ninety‑five security vendors flag the domain, providing independent vendor corroboration of risk. The domain appears on four external blocklists and is specifically listed as blocked by PhishDestroy, Polkadot, Enkrypt and Codeesura. The HTML page title returned during the brief capture was "AppChain", and the threat intelligence attributes label the campaign as a fake airdrop that impersonates the brand across. Although the site is offline, the infrastructure components—Cloudflare hosting, lack of encryption, low trust score and multi‑vendor detection—suggest a deliberate attempt to lure victims with a counterfeit airdrop offering.

Defenders should proactively add appchainresolverr.xyz to internal blocklists, enforce DNS filtering to prevent resolution, and consider blocking the hosting IP 188.114.96.3 at the network perimeter. Continuous monitoring of Cloudflare‑derived domains and rapid correlation with the listed blocklists will aid in early detection of repeat or derivative campaigns. Incident response teams should also audit any recent user reports of unsolicited airdrop communications referencing the "across" brand, as these may be tied to the same operational infrastructure.