billions-network[.]run

The domain billions-network.run was registered on March 12, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently active. DNS resolution points to IP address 188.114.97.3, which belongs to the Cloudflare network (AS13335) and is located in the United States. The site is protected by a Let's Encrypt certificate (issued by the E7 authority) and serves content over HTTP/3 using Cloudflare Browser Insights. A HTTP 403 response returns the page title "Just a moment...". The domain appears on one public security blocklist and has a Gridinsoft trust score of 0 out of 100. VirusTotal reports that 2 of 94 scanning engines flagged the domain, indicating at least partial malicious confidence. Nameservers are irma.ns.cloudflare.com and konnor.ns.cloudflare.com, confirming Cloudflare hosting. The site is already listed as blocked by PhishDestroy. While the page content has not been publicly analysed, the combination of recent registration, low trust score, blocklist presence, and partial VirusTotal detections strongly suggest a phishing infrastructure. Defenders should add the domain to deny lists, monitor DNS queries for the associated IP, and enforce outbound filtering to prevent credential submission to this host. Further investigation of the HTTP 403 response and any redirection chains is recommended to fully characterize the payload.