join-dreamcash[.]app

Analysis of join-dreamcash.app indicates active generic_phishing activity with a high risk rating. The domain was registered on March 03, 2026 through OwnRegistrar, Inc. and resolves to IP address 188.114.96.3, which is part of AS13335 Cloudflare, Inc., located in the United States. DNS resolution uses the Cloudflare authoritative nameservers adam.ns.cloudflare.com and danica.ns.cloudflare.com. The site presents a page title of "Just a moment..." and returns an HTTP 403 status code. TLS is provided by a Let’s Encrypt certificate (E8). Detected technologies include Cloudflare Browser Insights, Cloudflare services, and HTTP/3. Security telemetry shows the domain is listed on three blocklists and has been flagged by PhishDestroy, MetaMask, and SEAL. VirusTotal reports a single detection out of 94 scanned vendors, and Gridinsoft assigns a trust score of 0/100. Current evidence does not disclose the specific content or credential‑harvesting mechanisms, so the exact phishing vector remains uncertain. Defenders should block the domain and its associated IP, monitor for related traffic, and consider adding the domain to internal threat intelligence feeds. Continuous observation is advised to detect any evolution of the campaign or emergence of additional indicators.