coiresolver[.]xyz

PhishDestroy has identified coiresolver.xyz as an active crypto wallet drainer, designed to trick users into connecting their cryptocurrency wallets and authorizing malicious transactions that drain funds. This domain is currently under investigation but remains live, posing an ongoing risk to the crypto community. The site likely impersonates a legitimate decentralized application or wallet service to harvest credentials and private keys.

Technical analysis reveals that coiresolver.xyz resolves to IP address 188.114.96.3 and is registered through OwnRegistrar, Inc. The domain was created on October 07, 2025, making it less than a month old at the time of this report. Despite its malicious intent, VirusTotal shows 0 detections out of 95 security vendors, meaning traditional antivirus engines have not yet flagged it. This lack of detection underscores the importance of user vigilance. No blocklist hits or trust scores are available for this domain, but its recent registration and primary purpose indicate a high risk.

The domain remains active and is likely being used in ongoing phishing campaigns. Users are advised to avoid visiting coiresolver.xyz or engaging with any communications directing them to this site. If you have already interacted with the domain, immediately revoke any wallet permissions granted and transfer remaining funds to a secure wallet. Report the domain to relevant authorities and blockchain security platforms to help protect others.