connect[.]dapp-chain[.]com

The domain connect.dapp-chain.com was first registered on 28 February 2025 through Ultahost, Inc. and currently resolves to the IP address 104.21.112.1, which is hosted by Cloudflare (AS13335) in the United States. The site is reachable over HTTPS using a ZeroSSL RSA Domain Secure Site CA certificate and responds with HTTP 200. It is served via Cloudflare’s HTTP/3 stack and leverages Google Analytics, Google AdSense and Cookiebot scripts. Reputation services rate the domain extremely poorly; Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one public blocklist. VirusTotal records two detections out of ninety‑five scanned engines, indicating that multiple security vendors have observed malicious behavior. PhishDestroy already lists the domain as blocked, confirming active mitigation by at least one anti‑phishing feed. The only visible page element is the title “Nur einen Moment…”, which translates from German as “Just a moment…”. No further page content has been disclosed, so the exact phishing vector—such as credential capture forms or malicious redirects—remains unverified. The presence of advertising and analytics tags suggests a standard web front end, but the title and high‑risk scores imply a credential‑harvesting or redirection campaign aimed at unsuspecting visitors. Defenders should immediately add 104.21.112.1 and the FQDN connect.dapp-chain.com to outbound and inbound block lists. Monitoring of DNS queries for the domain and its Cloudflare nameservers (coen.ns.cloudflare.com, dell.ns.cloudflare.com) is advised, as well as updating IDS/IPS signatures to flag HTTP 200 responses that contain the German title. User‑training programs must warn employees that any link presenting a brief German loading message from this domain may be malicious, and any credentials entered should be assumed compromised.