diamond-fomo[.]pages[.]dev
“Suspected phishing site | Cloudflare”
diamond-fomo.pages.dev — Contenido no disponible. Suplantación de marca: Genericcloudflare; Tipo de estafa: Credential Phishing. Resumen de las pruebas: VirusTotal 1/93 (Fortinet); URLScan malicious verdict; 4 external blocklist matches; PhishDestroy score 82/100. Registrador: Cloudflare.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
On 24 July 2026 the domain diamond-fomo.pages.dev was observed hosting a credential‑phishing site. The site returned HTTP 403 and displayed the title “Suspected phishing site | Cloudflare”. DNS resolution points to 172.66.47.7, which belongs to Cloudflare’s network (ASN 13335) located in the United States. The domain was registered on 21 February 2026 through Cloudflare, Inc., and the TLS certificate was issued by Google Trust Services under the WE1 hierarchy, confirming a valid HTTPS endpoint. Cloudflare’s security stack is evident from the presence of HSTS, HTTP/3 and the Cloudflare name‑server pair sullivan.ns.cloudflare.com and naomi.ns.cloudflare.com.
Threat intelligence feeds have already flagged the domain. It appears on five blocklists – PhishDestroy, ScamSniffer, Polkadot, Enkrypt and Codeesura – and received a Gridinsoft trust score of 0 out of 100. VirusTotal analysis shows a single positive detection out of 93 scanned security vendors, reinforcing the malicious classification. The site is currently offline, as indicated by the “taken offline” status in the intelligence feed. While the page title confirms the presence of a generic “Suspected phishing site” banner, no specific targeted brand or credential‑type login page has been captured, leaving the exact victim‑targeting vector uncertain.
The combination of a freshly created domain, Cloudflare‑hosted infrastructure, a valid Google‑issued certificate, and rapid inclusion on multiple anti‑phishing blocklists suggests a typical credential‑phishing campaign that leverages the reputation of Cloudflare to evade basic reputation checks. Defenders should add diamond-fomo.pages.dev to local deny lists, block network connections to its resolved IP address, and monitor for any future re‑registration or similar domain patterns. Continuous observation of the associated Cloudflare name‑servers and the listed blocklists is recommended to detect potential re‑use.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Tecnologías · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % de confianzaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % de confianzaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % de confianzaAnálisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of diamond-fomo.pages.dev · checked Apr 12, 2026
Datos y informes externos
“Ace drainer”
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.