dappsconnect-3ch[.]pages[.]dev

This domain, dappsconnect-3ch.pages.dev, was registered on June 15, 2026, and remains active as of July 12, 2026. It resolves to IP 172.66.45.40, a Cloudflare-hosted address. Infrastructure analysis reveals the use of HSTS, HTTP/3, and a Google Trust Services SSL certificate, indicating a modern, encrypted connection typical of phishing sites attempting to appear legitimate. The domain is currently flagged by one security blocklist and has been categorized as generic phishing, though the specific target or method (e.g., credential harvesting, token theft) is not yet confirmed. No detections were reported by the 95 vendors that scanned the domain on VirusTotal, though this absence does not confirm safety. The domain is served via Cloudflare Pages, a common platform for rapidly deploying phishing sites due to its free tier and ease of use. Defenders should treat this domain as under investigation and prioritize blocking it at the DNS or proxy level, particularly in environments where Web3 or decentralized application (dApp) interactions occur. Further analysis of network traffic or endpoint logs may reveal additional indicators, such as wallet addresses or redirect chains, which could clarify the attack vector. Until more intelligence is gathered, assume the domain is malicious and monitor for connections from internal assets.