dappipoint[.]xyz

PhishDestroy identifies dappipoint.xyz as an active crypto drainer campaign with an elevated risk level. This domain mimics the legitimate Dappipoint platform to trick users into connecting cryptocurrency wallets and draining funds. The threat involves unauthorized wallet access and asset theft, requiring immediate user awareness and systemic mitigation. This domain was flagged by PhishDestroy on November 23, 2025, with VirusTotal reporting 2 out of 95 security vendors detecting malicious activity. The domain resolves to IP address 145.239.19.134 and uses a Let’s Encrypt SSL certificate for deceptive legitimacy. Registered through NameSilo, LLC, the domain is newly created and lacks established trust metrics, amplifying its potential for exploitation. Its low detection rate on VirusTotal suggests limited exposure but high operational risk due to active branding impersonation. Mitigation for crypto drainer phishing requires user education on wallet connection warnings, avoidance of unknown domains, and network-level blocking of the IP and domain. Organizations should deploy DNS filtering to block access and monitor for wallet connection prompts from untrusted sources. Users encountering this domain should report it, avoid interaction, and verify platform endpoints through official channels.