claim-tst[.]pages[.]dev

This domain, claim-tst.pages.dev, is an active brand impersonation site targeting users of the Celer network. The site presents itself as a legitimate airdrop claim portal, using the page title 'Test Airdrop' to lure victims into interacting with malicious smart contracts or disclosing sensitive wallet credentials. Such attacks are commonly designed to drain cryptocurrency assets from connected wallets, exploiting trust in the targeted brand to facilitate unauthorized transactions or credential theft. Analysis indicates the domain was registered through Cloudflare, Inc. on February 17, 2026, and currently resolves to the IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335). The site is flagged by 5 out of 95 security vendors on VirusTotal, and it appears on four independent security blocklists. The SSL certificate is issued by Let's Encrypt, a common practice even among malicious actors to create a false sense of legitimacy. The domain's creation date is unusually far in the future, suggesting possible data entry error or intentional obfuscation of registration details. Users who have visited claim-tst.pages.dev or interacted with its content should immediately disconnect their wallets from any associated dApps and revoke permissions for unknown smart contracts. Monitor wallet activity for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Report the domain to relevant security communities and avoid engaging with any communications or links related to this site. Exercise caution with unsolicited airdrop claims, particularly those requiring wallet connections or private key disclosures.