site-777214180-flashmyusdt-com[.]pages[.]dev

site-777214180-flashmyusdt-com.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. The domain resolves to 172.66.44.76, an address owned by Cloudflare (AS13335) located in the United States. The site presented the page title “Suspected phishing site | Cloudflare” and returned HTTP 403 responses, indicating that the content is not publicly accessible. Cloudflare‑provided services such as HSTS, HTTP/3, and the Google Trust Services / WE1 TLS certificate were observed, confirming that the domain leveraged a legitimate SSL chain. The domain’s nameservers are marty.ns.cloudflare.com and kinsley.ns.cloudflare.com, both typical of Cloudflare‑hosted zones. Threat intelligence flags this domain as a credential‑phishing operation.

VirusTotal recorded 11 detections out of 93 scanned vendors, and Google Safe Browsing classified the URL as social‑engineering. It appears on three public blocklists, including PhishDestroy, MetaMask, and SEAL, reinforcing the high‑risk assessment. Gridinsoft assigned a trust score of 0 out of 100, and the overall risk level has been designated as high. The current status is offline; the host returned a 403 HTTP status and the site has been taken down.

Evidence confirms that the infrastructure was deliberately provisioned to host a phishing campaign, likely targeting cryptocurrency wallets given the "flashmyusdt" component in the domain name, although no further payload or login page details have been recovered. The exact content of the page remains unknown because the site is no longer reachable. Defenders should block the domain and its associated IP address at perimeter and DNS layers, add the listed blocklist entries to internal filtering solutions, and monitor for re‑registration of similar subdomains under the same Cloudflare account. Ongoing vigilance is recommended, as Cloudflare’s flexible hosting can enable rapid recreation of phishing sites with minimal lead time.