decentrilizedinfo[.]xyz

The domain decentrilizedinfo.xyz has been identified as a high-risk phishing site specifically targeting users of Polkadot cryptocurrency wallets. Analysis confirms the domain is designed to mimic legitimate wallet interfaces, likely harvesting login credentials, recovery phrases, or private keys. As of the latest verification, the domain has been taken offline, though prior activity remains a confirmed threat. Infrastructure analysis reveals the domain was registered on September 08, 2025, through OwnRegistrar, Inc., and resolved to the IP address 198.18.1.156. The absence of an SSL certificate further increases the risk of man-in-the-middle attacks or data interception during transmission. Security vendors have flagged this domain with 10 detections out of 95 on VirusTotal, and it appears on four distinct security blocklists. The page title, matching the domain name, suggests a lack of effort to disguise the malicious intent, which is atypical for sophisticated phishing campaigns but effective against less cautious users. Current status indicates the domain is offline, reducing immediate risk to end users. However, the infrastructure may remain dormant or resurface under a different domain. Organizations and individuals are advised to block the domain and its associated IP address (198.18.1.156) at the network level. Users who may have interacted with the domain should immediately revoke any active sessions, rotate credentials, and monitor for unauthorized transactions. Cryptocurrency wallet providers are recommended to proactively warn users about this specific threat and implement additional verification steps for login attempts from new or suspicious locations.