dappsevmportal[.]site

Analysis of dappsevmportal.site indicates it is a brand-impersonation domain targeting Across, a known decentralized protocol. The domain was registered on July 26, 2025, through Web Commerce Communications Limited and has since been taken offline. Infrastructure analysis reveals it resolved to IP 172.67.174.33, hosted on Cloudflare's network (AS13335). No SSL certificate was detected, increasing the risk of unencrypted data interception.

The page title 'ProjectDappsMainNet' suggests an attempt to mimic a legitimate blockchain or DeFi portal, though the exact content remains unanalyzed. Google Safe Browsing classified the domain as engaging in social engineering, while Gridinsoft and Scamadviser both assigned trust scores of 1/100. The domain appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, which specifically flagged it as a fake airdrop scam. Two of 95 security vendors on VirusTotal detected malicious activity, though this does not represent a comprehensive assessment.

Defenders should treat this domain as high-risk due to its confirmed impersonation of Across, offline status notwithstanding. Organizations should block the domain at the DNS and proxy levels, monitor for related infrastructure (e.g., subdomains, IPs, or newly registered lookalike domains), and alert users to the fake airdrop scam classification. Given its Cloudflare hosting, additional obfuscation techniques may have been employed, warranting further investigation into associated threat actor infrastructure.