decentralizedapp[.]pages[.]dev

This domain, decentralizedapp.pages.dev, is flagged as an active crypto scam targeting users through a site titled COIN NODE. Registered on December 27, 2023, via Cloudflare, Inc., the domain remains operational with a current HTTP 200 status and resolves to IP 188.114.97.3, hosted on Cloudflare infrastructure in Canada. Infrastructure analysis reveals nameservers benedict.ns.cloudflare.com and dina.ns.cloudflare.com, alongside detected technologies including Bootstrap, jQuery, HSTS, and HTTP/3, consistent with modern web frameworks often exploited for phishing or scam operations. The domain appears on two security blocklists (PhishDestroy and ScamSniffer) and is classified as a crypto scam, though the exact mechanics—such as whether it functions as a wallet drainer, fake exchange, or token giveaway—remain unconfirmed due to limited page content analysis. A Gridinsoft trust score of 0/100 further supports its malicious classification. While 13 of 91 security vendors on VirusTotal flag the domain, this detection rate does not conclusively determine its payload or sophistication. Defenders should treat this domain as high-risk, particularly for users engaging with cryptocurrency-related services. Blocklist integration, DNS filtering, and monitoring for connections to 188.114.97.3 are recommended. The SSL certificate issued by Google Trust Services (WE1) does not mitigate the threat, as legitimate certificates are routinely abused in scam infrastructure. No ties to known phishing kits or specific brands beyond the COIN NODE page title have been identified, and further analysis of the site’s content is required to determine precise social engineering tactics.