store[.]wallpaperenginepreview[.]app

The domain store.wallpaperenginepreview.app was registered on August 16, 2025 through Web Commerce Communications Limited and points to the Cloudflare IP address 188.114.97.3, which is located in the United States and belongs to ASN 13335. No TLS certificate is presented, so the site operates only over HTTP. The domain is currently taken offline, and the takedown is reflected in blocklists such as PhishDestroy. Gridinsoft assigns a trust score of 1 out of 100, and the domain appears on a single external blocklist.

VirusTotal analysis shows that 13 of 95 scanning engines flagged the domain, indicating a consensus of malicious behavior. The listed scam type is “Gaming Scam,” suggesting that the site was used to lure victims with promises related to video‑game content or assets. The nameservers bart.ns.cloudflare.com and coco.ns.cloudflare.com are standard Cloudflare resolvers, providing no additional attribution. The registrar information and the lack of an SSL certificate are consistent with a short‑lived, profit‑oriented operation.

Because the site is no longer reachable, direct content inspection is not possible, and the exact phishing pages or credential‑harvesting mechanisms remain unknown. Nevertheless, the combination of a low trust score, multiple vendor detections, blocklist listings, and the identified scam category provides sufficient confidence to treat the domain as malicious. Defenders should add store.wallpaperenginepreview.app to URL filtering and DNS block policies, monitor the associated IP 188.114.97.3 for any future reuse, and consider correlating traffic logs for similar Cloudflare‑hosted gaming‑scam campaigns. Continued observation of new registrations using the same registrar or similar naming patterns is advised.