bitcreditcoin-airdrop[.]pages[.]dev

This domain is under investigation for brand impersonation targeting the Across cryptocurrency platform. The site presents itself as a legitimate airdrop campaign, a common tactic to deceive users into connecting wallets or disclosing sensitive credentials, potentially leading to unauthorized asset transfers or account compromise. Analysis indicates the domain bitcreditcoin-airdrop.pages.dev was registered on September 02, 2025, through Cloudflare, Inc. It resolves to IP address 172.66.47.35, hosted on Cloudflare's infrastructure (AS13335) in the United States. The SSL certificate is issued by Google Trust Services (WE1). As of the latest scan, the domain has 0 detections out of 95 engines on VirusTotal, though it appears on one security blocklist. The page title, 'BitCrediCoin Airdrop Live,' explicitly references a fraudulent airdrop, reinforcing the impersonation of Across. Mitigation requires immediate blocking of the domain and its resolving IP (172.66.47.35) at network and endpoint levels. Users should be alerted to verify airdrop legitimacy through official Across channels only. Wallet connections to unverified domains must be avoided, and any interaction with this site should prompt a review of connected wallet permissions and transaction history for anomalies. Security teams should monitor for similar impersonation patterns using the domain registration date and Cloudflare-hosted infrastructure as indicators.