mainnet-dapps[.]pages[.]dev

Analysis of mainnet-dapps.pages.dev indicates that the domain was registered on March 23, 2026 via Cloudflare, Inc. and is presently taken offline. DNS resolution points to the Cloudflare‑owned IP address 188.114.96.3, with authoritative nameservers clara.ns.cloudflare.com and major.ns.cloudflare.com. The site served a page titled “Metachaindapps Ecosystems || Standard Blockchain-Based Protocol” and advertised HSTS, Cloudflare and HTTP/3 support, suggesting a legitimate‑looking infrastructure. However, security telemetry flags the domain as a crypto‑focused phishing operation. PhishDestroy has already blocked the domain, and it appears on one external security blocklist.

VirusTotal reports that nine of ninety‑four AV engines flag the host, reinforcing the malicious assessment. The SSL certificate is issued by Google Trust Services under the WE1 root, which is common for Cloudflare‑proxied sites and does not mitigate the risk. Gridinsoft’s trust score of 0/100 reflects an extremely low reputation. An HTTP 403 response was observed, consistent with the domain being taken offline, but the prior indicators remain relevant for historical correlation. The exact phishing template or credential‑harvesting mechanism has not been captured, and the content of the page beyond the title remains unverified because the site is offline.

Defenders should continue to block the domain at DNS and proxy layers, monitor for any residual traffic to 188.114.96.3, and update detection rules to include the page title and the observed certificate chain. Because the registration details are limited to the registrar, no additional ownership attribution can be derived. Organizations should also consider adding the IP address 188.114.96.3 to threat‑intel feeds and ensure that any internal use of Cloudflare’s DNS resolver respects the blocklist entry.