navigator-dapp[.]pages[.]dev

navigator-dapp.pages.dev is currently active and resolves to the Cloudflare‑owned address 172.66.46.254. The domain was registered on April 15 2026 through Cloudflare, Inc. and is served by the authoritative nameservers daphne.ns.cloudflare.com and sri.ns.cloudflare.com. TLS termination is provided by a Let’s Encrypt certificate (issuer “YE1”), and the site presents HTTP Strict Transport Security (HSTS) and HTTP/3 support. Front‑end analysis shows the presence of React and jQuery libraries, indicating a modern JavaScript stack. The page title returned by the server is “Blockchain Node – Multiverse support,” which aligns with the listed scam type “Crypto Drainer.” VirusTotal scans show that 2 of 91 security vendors have flagged the domain, and the site is listed on a single external blocklist. Gridinsoft assigns a trust score of 0 / 100, and PhishDestroy has already blocked the domain. Evidence suggests the infrastructure is fully hosted on Cloudflare’s network, providing anonymity and rapid content delivery. No additional infrastructure such as dedicated command‑and‑control servers or external hosting providers has been observed. The lack of further public intelligence on the site’s functional payload means the exact method of crypto theft cannot be confirmed at this time. Defenders should treat navigator-dapp.pages.dev as a high‑risk indicator. Recommended actions include adding the domain and its resolved IP address to firewall deny lists, updating DNS filtering policies to block both the domain and its Cloudflare nameserver suffixes, and monitoring for similar domains registered through Cloudflare that reference blockchain or multiverse terminology. Continuous re‑scanning via multi‑engine services is advised to capture any changes in detection status.