dapps-integrated[.]netlify[.]app

Analysis of dapps-integrated.netlify.app shows a short‑lived Netlify‑hosted site created on 21 February 2026. The domain is registered through Name.com, Inc and uses the standard Netlify nameserver set (dns1‑dns4.p01.nsone.net). DNS resolution points to 98.84.224.111, an Amazon Web Services host located in Germany (AS16509). The TLS certificate is issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, confirming a valid HTTPS endpoint at the time of capture.

An HTTP GET returned a 404 status code and the only visible page title was “Connect Wallet”, consistent with a crypto‑related phishing lure. The site is presently offline, but historical data indicate that it was flagged by four independent blocklists and is listed in VirusTotal where 18 of 93 security engines marked it malicious. Additional blocking services—PhishDestroy, MetaMask, ScamSniffer, and SEAL—have also classified the domain as a crypto scam. Detected technologies include Netlify’s hosting stack and HTTP Strict Transport Security (HSTS).

The evidence collectively points to a high‑risk crypto phishing operation that likely attempted to harvest cryptocurrency wallet credentials. Because the site is no longer reachable, static analysis is limited to DNS, certificate, and metadata. Defenders should continue to deny any traffic to the domain, add it to local and network‑level blacklists, and monitor the associated IP range (98.84.224.0/24) for any resurgence of similar activity. Ongoing vigilance is recommended given the rapid turnover of Netlify‑based phishing pages and the observed use of reputable hosting services to lend legitimacy.