launchpad-xstock[.]pages[.]dev

The domain launchpad-xstock.pages.dev is a phishing site engaged in brand impersonation, specifically targeting Amazon users with an airdrop scam. This site falsely presents itself as 'xStocks - Tokenized Stocks & ETFs' to deceive victims into believing it is a legitimate platform, though no crypto drainer kit was detected. As of the latest verification, launchpad-xstock.pages.dev has been taken offline.

Technical indicators confirm the malicious nature of launchpad-xstock.pages.dev. The domain was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and Phishing Database, and appears on 4 security blocklists such as PhishDestroy, MetaMask, and ScamSniffer. Registered through Cloudflare, Inc. on November 25, 2025, it resolves to the IPv6 address 2606:4700:310c::ac42:2d0c, hosted by Cloudflare in the US. The SSL certificate is issued by Google Trust Services / WE1, and the site employs technologies like HSTS and HTTP/3. Despite these security measures, the domain received a Gridinsoft trust score of 0/100, and its HTTP status currently returns a 403 error.

Victims of launchpad-xstock.pages.dev should immediately revoke any token approvals granted to the site and transfer funds to a new wallet to prevent further unauthorized access. If login credentials were entered, change passwords for the affected accounts, enable two-factor authentication, and monitor for signs of fraud. Report the phishing domain to platforms like Google Safe Browsing, the Anti-Phishing Working Group (APWG), and the impersonated brand’s security team to aid in takedown efforts.