dapp[.]nodecrest[.]net

Analysis of dapp.nodecrest.net indicates active phishing infrastructure targeting cryptocurrency users. The domain, registered on February 21, 2026, through NameCheap, Inc., currently resolves to IP address 198.251.81.49 and is flagged on two security blocklists: PhishDestroy and BLP-Malware. The page title 'Problem loading page' suggests either a placeholder, a deliberate evasion tactic, or a failed deployment, but does not confirm the exact nature of the phishing content. No specific brand or platform is named in available metadata, limiting attribution to a generic crypto phishing classification. Technical indicators reveal the use of Bootstrap, LiteSpeed web server, jsDelivr CDN, and jQuery, alongside HTTP/3 support—common elements in modern phishing kits designed for performance and obfuscation. Four of 95 security vendors on VirusTotal detect the domain as malicious, though this figure may not reflect real-time or comprehensive coverage. The Gridinsoft trust score of 0/100 further supports high-risk classification. Defenders should treat this domain as active and hostile. Network-level blocking is recommended, particularly for organizations handling cryptocurrency transactions or decentralized application (dApp) traffic. The combination of recent registration, blocklist presence, and technical stack warrants immediate containment, even in the absence of confirmed victim reports. Further analysis of the IP and hosting provider may reveal additional linked infrastructure.