dogeairdrop[.]pages[.]dev

Analysis of the domain dogeairdrop.pages.dev confirms that it is actively engaged in a brand impersonation scam targeting Cloudflare. The domain was registered through Cloudflare, Inc. on May 12, 2025, and currently resolves to the IP address 172.66.47.43, located in the United States under the ASN AS13335, which is owned by Cloudflare, Inc. The SSL certificate is issued by Google Trust Services, providing a false sense of security to potential victims. The page title 'Worker threw exception | dogeairdrop.pages.dev | Cloudflare' suggests that the site is attempting to mimic Cloudflare's legitimate error pages, which can be a common tactic in phishing campaigns to gain trust and reduce suspicion. The site is flagged by one out of 95 security vendors on VirusTotal and has a Gridinsoft trust score of 0/100, indicating a high level of risk. It also appears on one security blocklist and is blocked by the PhishDestroy system. These factors strongly suggest that the domain is being used for malicious purposes, specifically to impersonate Cloudflare and potentially steal user credentials or personal information. The presence of technologies such as HSTS, Cloudflare, and HTTP/3 indicates that the attackers are using sophisticated methods to enhance the credibility of their phishing site. Defenders should implement immediate blocking or monitoring of this domain to prevent access by users within their networks. Additionally, network administrators should educate users about the risks of visiting untrusted sites and the importance of verifying the legitimacy of any site that requests personal information. Regular updates to security policies and procedures, along with continuous monitoring of threat intelligence feeds, are recommended to stay ahead of evolving phishing tactics.