dappsmainnetassets[.]pages[.]dev

dappsmainnetassets.pages.dev was flagged by PhishDestroy as an active generic phishing domain impersonating the Metamask crypto wallet. The site leverages a cloud-based phishing kit designed to siphon funds from unwary cryptocurrency users. Security research indicates this drainer kit specifically targets MetaMask wallet connections and transaction approvals, redirecting assets to attacker-controlled addresses. No custom malware payloads are hosted on the domain itself, relying instead on social engineering and fake asset prompts.

Technical indicators for dappsmainnetassets.pages.dev are consistent with a low-sophistication but actively maintained campaign. The domain resolves to IP 172.66.44.162 via Cloudflare, Inc., registered anonymously and protected by a Google Trust Services SSL certificate. VirusTotal currently returns 2/95 detections, indicating this threat remains under the radar of mainstream security engines. This domain is not yet listed on major blocklists, and its creation date is recent, suggesting rapid deployment for targeted campaigns.

The domain remains active and under investigation, with no immediate takedown in progress. Users should block 172.66.44.162 and avoid connecting wallets to dappsmainnetassets.pages.dev. Remaining risk is moderate due to active deployment and low detection rates—vigilant monitoring and browser-based warnings are advised until this threat is neutralized.