app-piteas[.]pages[.]dev

app-piteas.pages.dev is flagged as a high‑risk brand‑impersonation site targeting Cloudflare. The domain was registered on 28 March 2026 through Cloudflare, Inc. and resolves to the Cloudflare edge IP 172.66.44.141 located in California, United States. Authoritative name servers burt.ns.cloudflare.com and marjory.ns.cloudflare.com confirm that the domain is hosted on Cloudflare’s infrastructure, which is also reflected in the observed HTTP headers indicating HSTS, HTTP/3, and the presence of Cloudflare as a technology. The site presents a TLS certificate issued by Google Trust Services (WE1), and the HTTP response code is 200, indicating a reachable web service. The page title “dApp Piteas | Pulsechain Dex Aggregator” suggests a fake cryptocurrency exchange, matching the listed scam type “Fake Exchange”. VirusTotal scans report one of ninety‑four security vendors flagging the domain, and the domain appears on a known security blocklist; PhishDestroy has also listed it as blocked. The Gridinsoft trust score is 0 / 100, reinforcing the malicious assessment. Although the content of the page has not been examined, the combination of recent registration, low trust score, brand‑impersonation labeling, and external blocklist entries provide sufficient evidence to consider the domain malicious. Defenders should block traffic to 172.66.44.141 and add app‑piteas.pages.dev to URL filtering policies, monitor for any credential or token submissions to the site, and update intrusion detection signatures to flag attempts to contact the domain. Ongoing observation is recommended in case the site evolves its payload or begins serving malicious code.