momentum-web[.]pages[.]dev

momentum-web.pages.dev was registered on 2025-04-26 through Cloudflare, Inc. The domain resolves to 172.66.44.185, an address owned by AS13335 Cloudflare, Inc. located in the United States. DNS resolution uses the Cloudflare authoritative nameservers mallory.ns.cloudflare.com and osmar.ns.cloudflare.com. The site serves content over HTTPS with a certificate issued by Google Trust Services (CN=WE1). HTTP response code is 200 and the page title returned is "Momentum | Web & Apps Development". Automated fingerprinting identifies Astro, HTTP/3, HSTS, and Cloudflare front‑end technologies. The domain is classified as a high‑risk brand‑impersonation campaign targeting the "across" brand. Threat intelligence shows that 14 of 95 VirusTotal scanners flag the domain, and it appears on one public blocklist. Defensive products MetaMask, PhishDestroy, and SEAL have already blocked the domain. The current status is active. No further forensic artefacts such as malware payloads or credential‑harvesting forms have been disclosed. Defenders should add the domain and its IP to network‑level deny lists, monitor DNS queries for the Cloudflare nameservers, and continue to observe any changes in detection counts or blocklist listings.