dapp-app-adl[.]pages[.]dev

Analysis of the domain dapp-app-adl.pages.dev indicates active phishing infrastructure targeting users of a cryptocurrency exchange. The domain, registered on April 17, 2025, through Cloudflare, Inc., remains operational as of July 12, 2026, resolving to IP address 172.66.46.239 within AS13335 (Cloudflare, Inc.) in the United States. The page title explicitly identifies itself as 'Anexocc Exchange,' suggesting an attempt to impersonate a legitimate exchange platform. Infrastructure review reveals the use of Cloudflare nameservers (leif.ns.cloudflare.com, rosa.ns.cloudflare.com) and technologies including Vue.js, Unpkg, and JivoChat, alongside HSTS and HTTP/3 protocols. The domain is currently flagged by one security blocklist (PhishDestroy) under the classification 'generic_phishing,' with a Gridinsoft trust score of 0/100, reinforcing its high-risk status. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious Cloudflare-hosted domains. No vendor detections were recorded at the time of analysis, though this absence does not confirm safety. The domain’s creation over a year prior to the report date aligns with typical phishing campaign timelines, where domains are registered in advance to evade immediate detection. Defenders should treat this domain as confirmed malicious infrastructure, particularly given its explicit branding as a fake exchange. Blocking access at the network level and monitoring for related subdomains under the pages.dev namespace is recommended.