enctype-dapp[.]pages[.]dev

The domain enctype-dapp.pages.dev was registered on March 02, 2026 through Cloudflare, Inc. and resolves to the IP address 172.66.46.220, which is announced by AS13335 Cloudflare, Inc. and geolocated to the United States. The site presents a page titled “Blockchain Node - Multiverse support” and is classified as a “Fake Airdrop” campaign that impersonates the brand Across. SSL termination is provided by Google Trust Services under the WE1 certificate, indicating a valid TLS certificate despite the malicious intent.

HTTP responses return a 403 status code, and the domain has been taken offline as of the report date, July 22, 2026. Reputation scoring from external services shows a Scamadviser trust score of 41 / 100 and a Gridinsoft score of 0 / 100, reflecting low confidence in legitimacy. Threat intelligence shows the domain appears on two security blocklists—PhishDestroy and ScamSniffer—and VirusTotal records two positive detections out of 93 scanned engines.

The nameservers jaziel.ns.cloudflare.com and kenia.ns.cloudflare.com are standard Cloudflare entries, offering no additional attribution. While the available data confirms the infrastructure, the exact content of the page beyond the title remains unverified, and no further phishing‑kit artifacts have been disclosed. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurrection of the host on alternative subdomains, and consider sharing the indicator set with threat‑sharing communities to improve collective detection.