dapphome[.]org

This domain, dapphome.org, is identified as a crypto wallet drainer phishing site specifically targeting users of Atomic Wallet. The infrastructure was actively impersonating the legitimate Atomic Wallet platform to deceive victims into exposing private keys or seed phrases, enabling unauthorized transfer of cryptocurrency assets. As of the latest verification, the domain has been taken offline, though prior activity remains under investigation. Analysis indicates the domain was flagged by 4 of 95 security vendors on VirusTotal, reflecting moderate but consistent detection across threat intelligence platforms. It was registered on May 16, 2025, through Ultahost, Inc., and resolved to the IP address 104.21.12.174. The domain appeared on a single security blocklist and received a trust score of 0/100 from Gridinsoft, further corroborating its malicious classification. The page title explicitly displayed 'Atomic Wallet', reinforcing the targeted impersonation strategy. Infrastructure analysis reveals the domain was part of a broader phishing campaign leveraging newly registered domains to evade detection. While currently offline, the threat actor may redeploy similar infrastructure under different domains. Organizations and individuals are advised to monitor for domains registered through the same registrar or resolving to the identified IP range. Users who interacted with the site should immediately revoke wallet permissions, transfer assets to a secure wallet, and review transaction histories for unauthorized activity. Security teams should update blocklists with the domain and associated indicators to prevent future exposure.