mulit-launchpads[.]pages[.]dev

Analysis of mulit-launchpads.pages.dev shows that the domain was registered on March 24, 2026 through Cloudflare, Inc., and is served from the Cloudflare edge IP 172.66.47.106, which resolves to a location in California, United States. The site presents a Cloudflare‑generated page titled "Suspected phishing site | Cloudflare" and returns an HTTP 403 status code, indicating that the content is blocked by Cloudflare’s protective filters. The domain is currently listed as offline, and the page is flagged on at least one security blocklist, with PhishDestroy explicitly blocking it. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reinforcing the assessment of malicious intent.

The SSL certificate is issued by Google Trust Services under the WE1 series, a common certificate for Cloudflare‑protected sites, confirming that transport encryption is correctly configured but offering no indication of legitimacy. VirusTotal analysis reports that 8 of 94 security vendors have flagged the domain, providing independent confirmation of its suspicious nature. The primary scam category associated with the domain is credential phishing, suggesting attempts to harvest user credentials.

While the page title and blocklist entries provide concrete evidence of phishing activity, the exact payload, target brand, or phishing kit employed has not been observed, leaving those details uncertain. Defenders should continue to block the domain at network perimeter controls, update intrusion detection signatures to include the IP address 172.66.47.106, and monitor for any related command‑and‑control traffic. Organizations using web filtering should ensure that mulit-launchpads.pages.dev is denied, and incident response teams should treat any alerts referencing this domain as high priority, given the confirmed phishing classification and the low trust score.