resolvusr[.]xyz

Analysis of resolvusr.xyz shows a newly registered domain (creation date July 14 2025) that is currently offline but was previously used for a social media phishing campaign targeting Discord users. The site presented the page title “Resolv App” and was hosted on IP 104.21.5.226, which belongs to AS13335 Cloudflare, Inc. in the United States. Registration was performed through Web Commerce Communications Ltd, and the SSL certificate presented the identifier “WE1”. A Gridinsoft trust score of 0 / 100 indicates an extremely low reputation.

VirusTotal records show that 5 of 93 scanned security vendors flagged the domain, reinforcing the malicious assessment. The domain appears on five independent blocklists—PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura—demonstrating consensus among threat‑intelligence feeds. The declared scam type is “Social Media Phishing” with a specific focus on impersonating Discord, which aligns with the brand target information.

While the site is offline, the infrastructure footprint (Cloudflare edge IP, low trust score, and multiple blocklist listings) suggests a disposable‑use operation typical of credential‑harvesting campaigns. Defenders should continue to block resolvusr.xyz at DNS and proxy layers, monitor for any re‑registration attempts, and enforce multi‑factor authentication for Discord accounts to mitigate credential compromise. Additional scrutiny of outbound traffic to Cloudflare‑served IP ranges is advised to detect any resurgence of similar phishing infrastructure.