nodedapps[.]site

The domain nodedapps.site is a confirmed phishing site engaged in brand impersonation targeting MetaMask users. It presents itself as a legitimate cryptocurrency dApp interface to deceive victims into entering sensitive wallet credentials or private keys, posing an elevated risk of unauthorized access and financial theft. No drainer kit was identified, but the site operated as a cryptocurrency scam until it was taken offline.

Technical indicators confirm the malicious nature of nodedapps.site. The domain was flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, Fortinet, and G-Data, and appeared on 5 security blocklists such as PhishDestroy, ScamSniffer, and Polkadot. Registered through NameCheap, Inc. on August 18, 2025, it resolved to IP address 172.67.217.16, hosted by Cloudflare in the US. The SSL certificate was issued by WE1, and the observed page title was 'Restore dApp'. Gridinsoft assigned a trust score of 0/100, and the domain is currently returning an HTTP 429 status, indicating it has been taken offline.

Victims who interacted with nodedapps.site should immediately revoke any token approvals granted to unknown contracts using a tool like Revoke.cash. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Change passwords for any accounts where credentials may have been exposed, enable two-factor authentication, and report the incident to MetaMask support and relevant blockchain security platforms such as ScamSniffer or PhishDestroy. Additionally, submit the domain to Google Safe Browsing and other threat-intelligence feeds to prevent further abuse.