alphacity-meta-snapshot-dashboard-click[.]pages[.]dev

The domain alphacity-meta-snapshot-dashboard-click.pages.dev was identified as a high-risk phishing infrastructure specifically targeting cryptocurrency users through decentralized application impersonation. Analysis indicates this domain presented itself as a legitimate decentralized finance platform, using the page title 'Decentralized Dapp | Your one stop shop to build financial products on crypto rails' to lure victims. The domain is currently offline, though its operational period demonstrated clear intent to deceive users into interacting with fraudulent smart contracts or credential harvesting interfaces.

Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain was registered on March 29, 2026, through Cloudflare, Inc., and resolved to the IP address 188.114.96.3. Security vendors flagged the domain at a rate of 13 out of 95 on VirusTotal, while independent threat intelligence feeds listed it on four distinct security blocklists. The trust score from Gridinsoft was recorded at 0/100, further corroborating its malicious nature. Additional technical artifacts include the use of SweetAlert2 for deceptive pop-up interactions, jsDelivr and cdnjs for content delivery, and crypto-js for cryptographic operations—common components in phishing kits targeting blockchain users. Google Safe Browsing classified the domain under the 'SOCIAL_ENGINEERING' category, and the SSL certificate was issued by Google Trust Services, a legitimate provider often exploited in phishing campaigns to appear trustworthy.

Current status shows the domain as offline, though historical data and detection metrics suggest it was part of a broader campaign. Organizations and individuals are advised to block the domain at the DNS level and monitor for related subdomains or IP-based indicators. End-users should verify decentralized application URLs through official project documentation or verified community channels before interaction. Security teams are recommended to review logs for connections to 188.114.96.3 and correlate with other known phishing indicators associated with crypto-themed social engineering attacks.