dappsmainnt[.]pages[.]dev

Analysis of the domain dappsmainnt.pages.dev shows a recent infrastructure tied to an investment‑focused phishing campaign. The domain was registered on 21 February 2026 through Cloudflare, Inc., and resolves to the IP address 172.66.46.247, which belongs to AS13335 operated by Cloudflare in the United States. No TLS certificate is present, indicating the site was served over plain HTTP. The page title returned by the host, “ProjectDappsMainNet,” does not correspond to any known legitimate service, and the lack of encryption further reduces user trust.

VirusTotal has recorded 15 detections out of 93 scanning engines, confirming that multiple security vendors flag the domain as malicious. Independent blocklists, including PhishDestroy and ScamSniffer, have added the domain to their watchlists, and it appears on two additional security blocklists. The threat is classified as an investment scam, suggesting that victims were likely lured with promises of cryptocurrency or financial returns. Current monitoring indicates the site has been taken offline, but the underlying hosting infrastructure remains under Cloudflare’s control, which could be reused for future campaigns.

Defenders should continue to block the domain at DNS and proxy layers, ingest the IP address 172.66.46.247 into intrusion‑detection signatures, and monitor for any re‑registration attempts. Since the site lacks HTTPS, any traffic that does manage to reach it can be intercepted, providing additional forensic evidence. Continuous threat‑intel feeds should be queried for related domains that share the same registrar or IP range to pre‑empt further malicious deployments.