dappsmultinode[.]pages[.]dev

Analysis of dappsmultinode.pages.dev indicates that the domain was registered on February 21, 2026 through Cloudflare, Inc. and is served from the Cloudflare network (AS13335) with the IP address 188.114.96.3 located in the United States. The domain resolves to a Google Trust Services / WE1 SSL certificate and presents HSTS, Cloudflare and HTTP/3 support. An HTTP 403 response is returned, and the page title returned by the server is "Suspected phishing site | Cloudflare," suggesting that the host has been flagged by Cloudflare’s own detection mechanisms. Reputation services assign extremely low trust scores: Gridinsoft reports 0 / 100 and Scamadviser 10 / 100.

The domain appears on four security blocklists and is explicitly blocked by PhishDestroy, Polkadot, Enkrypt, and Codeesura. VirusTotal scans show four of ninety‑three security vendors flagging the domain as malicious. The listed scam type is an investment scam, aligning with the observed low trust metrics and blocklist presence.

The site is currently listed as offline, indicating that the malicious content has been taken down or the hosting has been suspended. Defenders should add the domain and its associated IP address to deny‑list rules, monitor for any re‑hosting on other Cloudflare‑protected IPs, and include the observed SSL certificate fingerprint in detection signatures. Ongoing vigilance is advised for any new subdomains created under the same registrar or nameservers (noor.ns.cloudflare.com, mike.ns.cloudflare.com), as the infrastructure pattern suggests a reusable Cloudflare‑based deployment for phishing campaigns.