decentralizednets[.]pages[.]dev

The domain decentralizednets.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the Cloudflare edge address 188.114.96.3, which is associated with AS13335 in the United States. The authoritative nameservers are howard.ns.cloudflare.com and ollie.ns.cloudflare.com, indicating the site is hosted on Cloudflare’s platform and benefits from HSTS and HTTP/3 support. A Google Trust Services / WE1 SSL certificate is present, confirming the site uses a valid TLS certificate issued by a trusted root. When accessed, the site returned HTTP 403 and the page title reads "Suspected phishing site | Cloudflare," signaling that the content has been taken offline by the provider.

Google Safe Browsing classifies the domain as a social engineering threat, and PhishDestroy has already added it to its blocklist. Independent scans show that 2 of 93 VirusTotal scanners flagged the domain, and it appears on a single external blocklist. Reputation services assign a Gridinsoft trust score of 0 / 100 and a Scamadviser score of 41 / 100, both reflecting a high likelihood of malicious intent. The only confirmed malicious activity is credential phishing, though the specific brand or service being spoofed is not disclosed in the available data.

Defenders should immediately block the domain at network perimeters and update DNS filtering policies to include both the domain and its associated IP range. Continuous monitoring of Cloudflare‑hosted IPs for similar patterns is advised, as the infrastructure can be reused for future campaigns. Because the site is currently offline, threat actors may reactivate it or clone the same infrastructure; therefore, threat‑intel teams should retain the indicator set for future correlation and consider sharing the indicator with industry‑wide blocklists to accelerate downstream protection.