dapp-aic[.]pages[.]dev

This domain, dapp-aic.pages.dev, is assessed as a confirmed crypto scam impersonating SafePal, a cryptocurrency wallet provider. Analysis indicates the domain was registered on February 21, 2026, through Cloudflare, Inc., and resolved to the IP address 188.114.96.3, hosted on Cloudflare's network (AS13335) in the United States. The page title, 'SafePal Starter,' directly aligns with the targeted brand, suggesting an intent to deceive users into believing the site is an official SafePal resource. No SSL certificate was detected, which is atypical for legitimate financial or crypto-related services and increases the risk of credential interception.

At the time of investigation, the domain was flagged by 2 of 93 security vendors on VirusTotal, and it appears on one security blocklist (PhishDestroy). The domain is currently offline, which may indicate takedown action or voluntary suspension by the hosting provider. Defenders should note that while the domain is inactive, the infrastructure (Cloudflare Pages) remains a potential vector for future malicious activity. Historical DNS records and WHOIS data should be preserved for further investigation, as the registration details may reveal patterns linked to other phishing campaigns.

Given the domain's association with a known crypto scam and its brief detection history, defenders are advised to treat any prior connections to this domain as high-risk. Monitoring for re-registration or similar domains under Cloudflare Pages (e.g., *.pages.dev) is recommended, particularly those using variations of 'SafePal' or other crypto-related keywords. No evidence of a phishing kit or additional payloads was identified in the available data, but the domain's structure and hosting suggest a lightweight, disposable infrastructure typical of short-lived phishing operations.