coindapp[.]xyz

This domain, coindapp.xyz, poses as a legitimate cryptocurrency wallet interface to execute unauthorized transactions. Victims who connect their wallets to the site risk immediate asset drainage, as the backend scripts are designed to bypass user confirmation prompts and transfer funds to attacker-controlled addresses. The threat specifically targets users of decentralized finance platforms, leveraging fake prompts for wallet connections or private key submissions. Analysis indicates the domain was registered on June 12, 2026, through a registrar known for hosting high-risk infrastructure. It is flagged by 7 out of 95 security vendors on VirusTotal, with additional detections across three independent blocklists. The SSL certificate, issued by a widely used provider, does not mitigate the risk, as the domain resolves to an IP address linked to prior malicious activity. Technologies detected include Node.js and Express, suggesting a server-side framework capable of processing stolen credentials or transaction requests in real time. If you visited coindapp.xyz and connected a wallet or entered sensitive information, immediately revoke all active wallet sessions and transfer remaining assets to a new, secure wallet. Monitor transaction histories for unauthorized activity, as attackers may retain access even after the site is taken offline. Report the incident to your wallet provider and relevant blockchain security teams to assist in tracking the stolen funds. Avoid interacting with any domains associated with this registrar or IP range until further verification.