MALICIOUS — CRITICAL
nodestechnology[.]pages[.]dev
The domain nodestechnology.pages.dev was created on February 21, 2026 and is hosted by Cloudflare, Inc.
- VirusTotal
- 16/93
- Blocklists
- 2 · MetaMask, SEAL
- उपलब्धता
- पहुंच योग्य · पहुंच प्रतिबंधित · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
nodestechnology.pages.dev — पहुंच योग्य · पहुंच प्रतिबंधित (HTTP 403). ब्रांड प्रतिरूपण: Coinbase; घोटाले का प्रकार: Brand Impersonation. साक्ष्य सारांश: VirusTotal 16/93 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, CyRadar); Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 95/100. रजिस्ट्रार: Cloudflare.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
Evidence Analysis
The domain nodestechnology.pages.dev was created on February 21, 2026 and is hosted by Cloudflare, Inc. The site resolves to the IPv6 address 2606:4700:310c::ac42:2fa0, which is mapped to the United States and announced by AS13335 (Cloudflare). DNS is served by Cloudflare’s authoritative nameservers max.ns.cloudflare.com and norah.ns.cloudflare.com. The HTTPS certificate is issued by Google Trust Services under the WE1 root, indicating a valid TLS chain, but the presence of a legitimate certificate does not mitigate the malicious intent. The web server returns HTTP 403, suggesting restricted access or a takedown, and the page title observed before the site was taken offline was "Token DApps".
The infrastructure employs HSTS and HTTP/3, consistent with modern Cloudflare deployments. Security analysis shows that 16 of 93 VirusTotal scanners flagged the domain, and Google Safe Browsing classifies it as a social‑engineering threat. Independent blocklist monitoring reports the domain on three security blocklists, and it is explicitly blocked by PhishDestroy, MetaMask, and SEAL. The site is identified as a brand‑impersonation campaign targeting Coinbase, with the scam type recorded as brand impersonation.
Gridinsoft assigns a trust score of 0 out of 100, indicating extreme suspicion. While the domain’s current status is offline, the combination of vendor detections, blocklist listings, and the impersonation of a well‑known cryptocurrency exchange suggests a high‑risk credential‑harvesting operation. Defenders should continue to block the domain, monitor for re‑use of the underlying IP or Cloudflare account, and advise users to be wary of unsolicited links referencing Coinbase or token‑related services, especially those that reference the "Token DApps" title.
डेटा कवरेज12 recorded checks
नेटवर्क सुरक्षा इंटेलिजेंस
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
तकनीकें · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of nodestechnology.pages.dev · checked Mar 6, 2026
साक्ष्य और बाहरी रिपोर्टेंIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।