manual-dapps[.]org

manual-dapps.org is currently active and serves a page titled “Clock error”. The domain was registered on 21 February 2026 through Global Domain Group LLC and resolves to the IPv4 address 65.21.174.205, which is hosted by Hetzner Online GmbH in Finland (AS24940). DNS resolution uses the authoritative name servers ns41.link-host.net and ns42.link-host.net, and the site presents a valid Let’s Encrypt certificate (R13). The site returns HTTP 403 for the initial request, indicating restricted access, while the page title suggests a possible error page used in the campaign. Threat intelligence classifies the activity as a DeFi scam, and the domain appears on four independent blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. Reputation scoring from Gridinsoft assigns a zero‑out‑of‑hundred trust rating. VirusTotal analysis shows that two of ninety‑three scanning engines flagged the domain, confirming malicious behavior. The combination of recent registration, hosting on a reputable provider, use of legitimate TLS, and low detection coverage suggests the operators are attempting to evade automated filters while targeting decentralized finance users. Defenders should block the domain at network perimeters, monitor DNS queries for the associated IP and name servers, and consider adding the domain to internal allow‑list exceptions only after thorough verification. Further analysis of the content returned after bypassing the 403 response is required to determine the exact phishing payload and victim interaction flow.