dapssauthenticatexplorer[.]pages[.]dev

This domain, dapssauthenticatexplorer.pages.dev, is flagged as a high-risk crypto drainer phishing site targeting cryptocurrency wallet users. Analysis indicates the page title explicitly references 'Blockchain,' suggesting an attempt to impersonate legitimate wallet services to harvest credentials or execute unauthorized transactions. No specific drainer kit signatures have been confirmed, but the domain aligns with known tactics used in wallet-draining campaigns, particularly those targeting decentralized finance (DeFi) users. Infrastructure analysis reveals the following technical indicators: the domain is hosted on Cloudflare infrastructure (AS13335) and resolves to IP address 172.66.44.85. It was registered on January 23, 2025, through Cloudflare, Inc. The SSL certificate is issued by Google Trust Services (WE1). Detection metrics show 1/95 security vendors on VirusTotal flagging the domain as malicious, while it appears on 3 independent security blocklists. No Google Safe Browsing (GSB) entries were identified at the time of analysis. The domain remains active, with no evidence of takedown or mitigation. Response actions by security providers include blocking by PhishDestroy, MetaMask, and SEAL, indicating broad recognition of its malicious intent. The remaining risk is classified as high due to its operational status, recent registration, and association with crypto drainer phishing. Users are advised to avoid interaction, revoke any connected wallet permissions, and monitor accounts for unauthorized transactions. Network-level blocking of the domain and IP is recommended for enterprise environments.