ib-project-dapp-c4[.]pages[.]dev

The domain ib-project-dapp-c4.pages.dev was created on 21 February 2026 and is currently taken offline, returning HTTP 403. It resolves to 172.66.46.248, an address owned by AS13335 Cloudflare, Inc. in the United States. Cloudflare is also the registrar, and the domain uses Cloudflare‑provided DNS with nameservers cheryl.ns.cloudflare.com and gerald.ns.cloudflare.com. The site presents the page title “Suspected phishing site | Cloudflare” and employs HSTS and HTTP/3, confirming modern Cloudflare edge delivery. The SSL certificate is issued by Google Trust Services under the WE1 identifier, indicating a valid TLS chain but not mitigating malicious intent.

Security telemetry shows the domain is listed on four blocklists and has been blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. Gridinsoft assigns a trust score of 0 out of 100. VirusTotal analysis recorded detections from four of ninety‑three scanners, reinforcing the suspicion of malicious activity. The intelligence categorises the campaign as an investment‑scam phishing operation.

While the site is offline, the infrastructure—Cloudflare hosting, a globally recognized certificate, and the observed blocklist activity—suggests the operators leveraged reputable services to increase credibility. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑hosting attempts, and correlate any outbound connections to 172.66.46.248 with existing alerts. Additional investigation should focus on the four vendors that flagged the domain on VirusTotal to determine the payload or technique used, and on any related domains sharing the same nameservers or certificate. Until the domain is confirmed clean, it should be treated as malicious.