dapp-home[.]pages[.]dev

Analysis of dapp-home.pages.dev indicates a high‑risk brand‑impersonation campaign targeting Ledger users. The domain was registered on July 12, 2024 through Cloudflare, Inc. and resolves to IP 104.21.96.1, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Infrastructure details show the site is served behind Cloudflare with nameservers wally.ns.cloudflare.com and james.ns.cloudflare.com, and it presents a valid SSL certificate issued by Google Trust Services / WE1. HTTP responses return status 200 and the site advertises technologies including Unpkg, HSTS, HTTP/3, AOS, and Cloudflare edge services. The page title observed is "ordialsynprotocol" and the campaign is associated with an Airdrop Scam phishing kit, classified as a crypto scam. Threat intelligence sources report that PhishDestroy has blocked the domain, Gridinsoft assigns a trust score of 0/100, and VirusTotal records a single detection out of 93 security vendors. The domain appears on one external blocklist. While the exact content of the landing page has not been publicly examined, the combination of brand impersonation, a known phishing kit, and low trust scores confirms malicious intent. Defenders should block DNS resolution for dapp-home.pages.dev, add the address to network‑level deny lists, and monitor for related indicators such as the associated IP and Cloudflare nameservers. Continuous re‑evaluation is advised in case additional detections emerge.