xdefi-world[.]created[.]app

The domain xdefi-world.created.app has been identified as a crypto drainer, impersonating the XDEFI Wallet brand. This malicious domain was configured to deceive users into disclosing sensitive information, potentially leading to unauthorized cryptocurrency transactions. The site's use of deceptive branding, including the page title 'Official Site™ | XDEFI Wallet™ Secure Your Account With XDEFI,' suggests a direct attempt to exploit the trust associated with XDEFI Wallet.

Technical analysis of xdefi-world.created.app reveals several indicators of malicious intent. The domain was created on July 12, 2023, and is registered through Tucows Domains Inc. Despite being offline, it had resolved to the IP address 216.150.1.129. The site employed technologies such as Vercel and HSTS, and it was secured with a Let's Encrypt SSL certificate. VirusTotal analysis shows that 4 out of 95 security vendors flagged the domain as malicious. Additionally, it appears on one known security blocklist and was proactively blocked by PhishDestroy.

Currently, the domain is offline, reducing immediate risk. However, since it remains registered, there is a possibility of its reactivation or use in similar fraudulent schemes. The presence of this domain on security blocklists and its detection by multiple security vendors indicate ongoing vigilance is required. Users are advised to exercise caution and verify the authenticity of cryptocurrency-related websites before interacting. Monitoring tools should be updated to detect this and similar domains quickly to prevent potential exposure to crypto drainer threats.