dappresolvernode-fix[.]pages[.]dev

The domain dappresolvernode-fix.pages.dev was created on 21 February 2026 and is currently listed as offline with an HTTP 403 response. Registry data shows the domain was registered through Cloudflare, Inc., and its authoritative nameservers are glen.ns.cloudflare.com and heidi.ns.cloudflare.com. The host resolves to IP 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. TLS is provided by a Google Trust Services certificate issued to the WE1 authority, and the server advertises HSTS and HTTP/3 support.

VirusTotal analysis recorded detections by six of ninety‑three security vendors, indicating malicious activity. The domain appears on five public blocklists and is explicitly blocked by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. Independent reputation services assign very low scores: Gridinsoft rates the domain 0 / 100, while Scamadviser gives it 41 / 100. The page title returned by the web server is “React App,” and the indicated scam type is a fake airdrop that impersonates the Across brand.

Given the combination of recent creation, low reputation metrics, multiple blocklist listings, vendor detections, and the use of a legitimate‑looking SSL certificate, the infrastructure appears to have been rapidly deployed for a targeted impersonation campaign. Defenders should immediately add the domain and its IP address to deny‑list rules on perimeter firewalls and DNS resolvers, ensure web proxy filters block the host, and monitor for any future re‑registration attempts. Continuous threat‑intel feeds should be consulted for related Across‑themed phishing indicators, and any inbound traffic to the domain should be logged and investigated for credential harvesting or malware delivery attempts. Because the site is presently offline, threat actors may reactivate it, so maintaining the block and monitoring stance is recommended.