gns3dev[.]app

The domain gns3dev.app was registered on July 28, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolved to the IPv4 address 31.76.87.136. Cloudflare authority is indicated by the authoritative name servers armfazh.ns.cloudflare.com and gail.ns.cloudflare.com, suggesting the infrastructure is hosted behind Cloudflare's edge network. VirusTotal analysis shows that 2 of 91 security scanners flagged the domain, indicating a low but non‑zero detection rate among automated tools. The same domain appears on a single public phishing blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one threat‑intelligence feed considers it malicious.

The risk rating assigned is high and the operational status is listed as active. Publicly available intelligence does not include a page title, SSL certificate details, or HTTP response codes, so the exact content served by the site remains unverified. Consequently, defenders cannot confirm the specific brand or lure employed, only that the domain is categorized as a generic phishing vector. The limited detection footprint—two vendor detections and a single blocklist entry—may reflect a newly deployed campaign that has not yet been widely observed.

Defensive recommendations include adding gns3dev.app and its resolved IP address 31.76.87.136 to DNS‑based blocklists, configuring web‑proxy filters to deny traffic to the domain, and monitoring for any credential‑harvesting attempts that reference the domain in email headers or logs. Organizations should also correlate internal security events with the known blocklist identifiers and consider sharing any additional observables with community feeds to improve collective detection. Continuous re‑evaluation is advised, as further analysis may reveal additional indicators such as malicious payloads, SSL anomalies, or expanded infrastructure.