smartblockchain-dapp[.]xyz

The domain smartblockchain-dapp.xyz was registered on February 21, 2026 and is currently taken offline. DNS resolution maps the name to the IP address 104.21.31.236, which belongs to Cloudflare, Inc. (ASN13335) and is geolocated in the United States. The presence of a Cloudflare front end suggests the operator leveraged the provider's CDN and mitigation services to obscure the true origin of the malicious infrastructure. The site presented a valid TLS certificate identified as WE1, indicating that encrypted HTTPS traffic was available while the site was active.

VirusTotal scans show that 13 of 93 security engines flagged the domain, reinforcing the suspicion of malicious behavior. Independent threat feeds have recorded the domain in one AlienVault OTX pulse and it appears on four public blocklists, confirming its recognition by multiple security communities. Additionally, dedicated anti‑phishing services—PhishDestroy, Polkadot, Enkrypt, and Codeesura—have each listed the domain as blocked, further evidencing its use in fraudulent campaigns. The available intelligence classifies the activity as an investment scam, a subtype often associated with promises of high‑yield returns or blockchain‑related opportunities.

While the exact landing page content and any credential‑harvesting mechanisms have not been publicly disclosed, the convergence of registration timing, Cloudflare hosting, TLS presence, and multi‑vendor detections provide a solid evidentiary basis for categorizing the domain as high‑risk. Defenders should continue to block the domain at network perimeter controls, update URL filtering and DNS sinkhole rules, and monitor for any resurgence of the domain or related CNAME aliases. Because the domain is offline, any future re‑appearance should be treated with heightened scrutiny, and incident response teams should verify associated email campaigns or malicious links against the indicators of compromise documented here.