newdapp-connect[.]com

The domain newdapp-connect.com has been identified as a crypto drainer phishing site designed to compromise digital wallet credentials. Analysis indicates the infrastructure was actively targeting users through credential harvesting mechanisms, though the domain is currently offline. No specific brand impersonation was confirmed, but the threat type aligns with wallet-draining malware distribution patterns. Infrastructure analysis reveals the domain resolved to IP address 104.21.32.221 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 01, 2026. Detection metrics show the domain was flagged by 6 of 95 security vendors on VirusTotal, while appearing on 3 distinct security blocklists. Additional trust scoring systems assigned a Gridinsoft trust score of 0/100, further validating its malicious classification. The site employed Cloudflare and HTTP/3 technologies, which are frequently observed in phishing campaigns to obfuscate origin servers and evade detection. As of the latest verification, newdapp-connect.com has been taken offline, though residual risks may persist through cached pages or related infrastructure. Users are advised to revoke any permissions granted to suspicious wallet connections and monitor transaction histories for unauthorized activity. Security teams should update blocklists to include this domain and its associated IP address, while verifying endpoint protection systems have incorporated relevant detection signatures. The creation date discrepancy suggests potential domain spoofing or registration timestamp manipulation, warranting additional scrutiny of registrar records.