dappslaunch[.]netlify[.]app

On 22 July 2026, dappslaunch.netlify.app was flagged as a crypto‑related phishing infrastructure. The site presented the page title “Web3 Dapps” and employed a Seed Phrase phishing kit, indicating an attempt to harvest cryptocurrency recovery phrases. Technical fingerprints show the domain is hosted on Netlify, with HSTS enforced, and resolves to the IP address 35.157.26.135, which belongs to Amazon.com, Inc. (AS16509) in Germany. The SSL certificate is issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, confirming the use of a legitimate certificate authority. Nameserver records point to dns1.p04.nsone.net and dns2.p04.nsone.net.

The HTTP response returned a 404 status, and the domain is currently taken offline. VirusTotal analysis, based on 95 vendor scans, reported no detections, but this absence does not constitute evidence of benign intent. The domain has been listed on four security blocklists and is actively blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. Scamadviser assigned a trust score of 1 out of 100, reinforcing the malicious assessment.

Registration appears to have been performed through Netlify’s internal registration system. While the offline status limits immediate threat exposure, the observed infrastructure—particularly the use of a reputable hosting provider, a valid TLS certificate, and a known seed‑phrase phishing kit—suggests the operators can quickly reactivate the site or clone the setup under a different hostname. Defenders should monitor Netlify‑hosted subdomains for similar patterns, enforce outbound filtering for seed‑phrase related strings, and ensure that URL‑filtering solutions incorporate the observed IP address and nameserver pair. Ongoing vigilance is advised, especially because the domain’s removal does not guarantee that the associated campaign infrastructure has been dismantled.