holders-dapp-7aq[.]pages[.]dev

The domain holders-dapp-7aq.pages.dev was registered on July 14, 2025 and is currently active under an ongoing investigation. HTTP requests return a 200 status code and the site presents the page title "Holders - Non-custodial way for usual payments," suggesting a financial theme consistent with the listed scam type of Investment Scam. Infrastructure analysis shows the domain resolves to IP 172.66.44.101, hosted in the United States and associated with ASN 13335, a Cloudflare network. The domain uses Cloudflare nameservers (owen.ns.cloudflare.com, dina.ns.cloudflare.com), enforces HSTS, and supports HTTP/3. TLS is provided by Google Trust Services under the WE1 certificate chain. Reputation services assign low trust scores (Scamadviser 41/100, Gridinsoft 0/100), and the domain appears on a single security blocklist, currently blocked by PhishDestroy. While VirusTotal reports no detections from 93 vendors, this absence does not confirm safety. The precise content beyond the page title has not been publicly dissected, leaving uncertainty about the exact phishing flow or credential capture mechanisms. Defenders should continue to block the domain at network perimeter, monitor DNS queries for the associated IP, and consider sinkholing the address to disrupt potential traffic. Ongoing threat‑intel collection is recommended to capture any evolving payloads or command‑and‑control endpoints that may be linked to this infrastructure.