dapp-p1f[.]pages[.]dev

This domain is flagged as an active crypto drainer phishing site with a high risk level, designed to extract cryptocurrency wallet credentials and drain funds from unsuspecting users. Analysis indicates the infrastructure is specifically tailored to mimic decentralized application interfaces, a common tactic in cryptocurrency-related fraud schemes. Infrastructure analysis reveals the domain dapp-p1f.pages.dev was registered on July 24, 2024, through Cloudflare, Inc. and resolves to the IPv6 address 2606:4700:310c::ac42:2d2e, hosted on AS13335 in the United States. The SSL certificate is issued by Google Trust Services (WE1), providing a veneer of legitimacy. Despite this, only 1 out of 95 security vendors on VirusTotal currently flag the domain, and it appears on a single security blocklist, suggesting limited detection at this stage. The page title 'Dapp' further aligns with tactics used to impersonate decentralized platforms. To mitigate risks associated with this crypto drainer, users should immediately block the domain and its associated IP address within network security controls. Wallet holders are advised to verify the authenticity of any decentralized application interface before connecting wallets or entering credentials. Organizations should update endpoint protection rules to include this domain and monitor for connections to 2606:4700:310c::ac42:2d2e. Given the domain's recent creation and low detection rate, heightened vigilance is required, particularly for users interacting with cryptocurrency platforms.