shiba-protocol[.]net

The domain shiba-protocol.net was registered on February 21 2026 through NiceNIC International Group Co., Limited and is currently active. DNS resolution points to IP 151.101.1.91, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative name servers are cameron.ns.cloudflare.com and kinsley.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. HTTPS is presented with a Google Trust Services / WE1 certificate, and the web server returns an HTTP 307 temporary redirect status, a pattern often observed in credential‑stealing or redirection campaigns.

The page title returned by the site is "Vox", but no additional content analysis is available. Security telemetry classifies the site as a brand‑impersonation scam targeting the brand “across”. Three of ninety‑three VirusTotal scanners have flagged the domain, and three independent blocklists—PhishDestroy, ScamSniffer, and Enkrypt—have already listed it as malicious. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the low‑reputation assessment.

Given the combination of a recent registration date, Cloudflare hosting, a valid SSL certificate, and a redirect response, the infrastructure is typical of fast‑flux or throwaway phishing operations. Defenders should block DNS resolution to 151.101.1.91, add shiba-protocol.net to URL filtering and web‑proxy deny lists, and monitor network traffic for outbound connections to the Cloudflare IP range associated with this domain. Continuous re‑scanning on VirusTotal and other sandbox services is advised to capture any evolving payloads. Incident response teams should also correlate logs for attempted credential submissions that may be directed to this domain, as the brand‑impersonation label suggests a credential‑harvesting motive.