resolverdapp[.]xyz

Analysis of resolverdapp.xyz indicates a confirmed brand impersonation campaign targeting Google. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and is currently offline as of July 24, 2026. Infrastructure analysis reveals Cloudflare-hosted nameservers (ridge.ns.cloudflare.com, thea.ns.cloudflare.com) and resolution to IP 142.251.163.106 (AS13335, United States). No SSL certificate was detected, increasing the risk of unencrypted credential interception.

Detection data shows the domain appears on seven security blocklists, including PhishDestroy, MetaMask, ScamSniffer, Polkadot, and SEAL. Seven of 93 security vendors on VirusTotal flagged the domain as malicious. Gridinsoft assigned a trust score of 0/100, further corroborating its malicious classification. The page title 'Google' aligns with the reported scam type of brand impersonation, though the exact content and functionality of the site remain unanalyzed due to its offline status.

Defenders should treat this domain as high-risk for credential harvesting or malware distribution under the guise of Google services. Blocklist integration is recommended, particularly for organizations using the listed vendor protections. Given the domain's offline status, monitoring for re-activation or related infrastructure (e.g., shared IP, nameservers, or registrar) is advised. No evidence of a phishing kit or additional scam categorization (e.g., crypto drainer, giveaway) was present in the available intelligence.