dapp-api-dsz[.]pages[.]dev

This domain, dapp-api-dsz.pages.dev, is identified as a credential harvesting phishing site designed to deceive users into disclosing sensitive login credentials, private keys, or personal information. Such sites often mimic legitimate decentralized application (dApp) interfaces or API portals to exploit trust in blockchain and Web3 ecosystems. The domain was likely used in targeted campaigns against users of cryptocurrency platforms, wallet services, or decentralized finance (DeFi) protocols, where stolen credentials can lead to unauthorized access and financial loss. Analysis indicates the domain was registered on July 24, 2024, through Cloudflare, Inc., and was hosted on infrastructure associated with AS13335. At the time of detection, the domain was flagged by 11 out of 95 security vendors on VirusTotal, confirming its malicious classification. It appeared on one security blocklist and was subsequently blocked by multiple threat intelligence feeds. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the threat, as phishing sites commonly use valid certificates to appear legitimate. The domain resolved to the IP address 172.66.46.211, located in the United States, and was taken offline following detection. Users who visited dapp-api-dsz.pages.dev or interacted with any content hosted on it should assume their credentials or sensitive data may have been compromised. Immediately revoke access to any connected accounts, especially cryptocurrency wallets or financial services. Change passwords on all platforms where the same credentials were used, and enable multi-factor authentication where available. Monitor accounts for unauthorized transactions or suspicious activity, and consider using a hardware security key or authentication app for enhanced protection. If private keys or recovery phrases were entered, transfer assets to a new, secure wallet and report the incident to relevant platform security teams. Avoid clicking on links from unsolicited messages, and verify domain authenticity before entering credentials.