dappsmainnetasset[.]pages[.]dev

The domain dappsmainnetasset.pages.dev was identified as a crypto wallet drainer phishing site targeting users of decentralized applications. This threat type is designed to trick victims into connecting their cryptocurrency wallets to malicious smart contracts, enabling unauthorized asset transfers. As of the latest assessment, the domain has been taken offline, though prior activity indicates a high-risk classification due to its technical infrastructure and detection history. Analysis indicates the domain was flagged by 19 of 95 security vendors on VirusTotal, reflecting broad consensus on its malicious nature. It was registered through Cloudflare, Inc. on October 21, 2025, and resolved to the IP address 172.66.47.164, hosted on autonomous system AS13335 (Cloudflare, Inc.) in the United States. The domain appeared on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and was explicitly flagged as phishing by Google Safe Browsing. The SSL certificate was issued by Google Trust Services (WE1), a common characteristic of both legitimate and malicious sites leveraging Cloudflare’s infrastructure. Current status confirms the domain is offline, though residual risk remains due to the persistence of phishing infrastructure. Organizations and individuals are advised to block the domain and its associated IP at the network level, update endpoint protection rules to include the domain in deny lists, and monitor for related indicators of compromise. Users who may have interacted with the site should revoke any connected wallet permissions, transfer assets to a new wallet, and review transaction histories for unauthorized activity. Proactive threat hunting for related domains registered under similar patterns is recommended.