dashboard-io[.]xyz

PhishDestroy classifies dashboard-io.xyz as an active crypto wallet drainer operated since March 2026. The domain mimics a legitimate dashboard interface to trick users into connecting compromised wallets for fund theft. Drainers detected include clipboard hijackers and fake signature requests that silently approve malicious transactions once a wallet is linked. No specific brand impersonation has been confirmed from available telemetry, but the page layout closely resembles common crypto dashboard clones used by threat actors targeting DeFi users.

Technical indicators for dashboard-io.xyz are as follows: VirusTotal detection rate is 1 out of 95 security vendors (1/95), domain registered through Dynadot LLC, resolves to IP 188.114.96.3, issued SSL via Let’s Encrypt, domain creation date is March 02, 2026, and Google Safe Browsing shows no safe browsing status. The domain remains unblocked on major browsers and has not been listed on major threat intelligence blocklists.

This domain remains active as of the most recent scan. Immediate actions recommended include blocking the domain at DNS and network levels, flagging the IP 188.114.96.3 for takedown or sinkholing, and revoking the Let’s Encrypt certificate. Remaining risk is elevated due to the new domain age and low detection coverage, suggesting active campaigns are ongoing with potential for increased victim count. Users interacting with any crypto dashboard should verify URLs manually and avoid pasted links.