dappmultiwallet[.]live

On July 29, 2026 analysts observed that the domain dappmultiwallet.live is actively used as a crypto‑drainer platform. VirusTotal records show that 12 out of 91 scanned security vendors flagged the domain as malicious, indicating a consensus among multiple AV engines that the site hosts illicit activity. The domain is currently listed on four public blocklists and is explicitly blocked by the anti‑phishing services PhishDestroy, MetaMask, ScamSniffer and SEAL, reinforcing its classification as a high‑risk threat.

No additional infrastructure details such as registrar information, hosting IP, ASN, or SSL certificate data have been published, so the underlying hosting environment remains unknown. Likewise, page‑title metadata and any embedded brand references have not been disclosed, limiting the ability to attribute the site to a specific impersonated service. The absence of these attributes does not diminish the observed risk; the combined vendor detections and blocklist presence are sufficient to justify immediate defensive measures.

Defenders should ensure that network‑level filters block any HTTP or HTTPS traffic to dappmultiwallet.live, update endpoint protection signatures to include the domain, and incorporate the four listed blocklist sources into their threat‑intel feeds. Users of cryptocurrency wallets should be instructed to reject any unsolicited prompts that request private keys or transaction approvals originating from this domain. Continuous monitoring for any new indicators—such as DNS resolution changes, certificate issuance, or emerging phishing kits—should be maintained, and any observed activity should be reported to the relevant information‑sharing communities.