lobstarismclaim[.]pages[.]dev

This domain, lobstarismclaim.pages.dev, poses a high-risk brand impersonation threat specifically targeting Twitter users through fraudulent airdrop schemes. The page presents itself as an official Twitter promotion under the fabricated "Lobstarismism | Airdrop" title, attempting to deceive visitors into disclosing authentication credentials or transferring cryptocurrency assets. Analysis indicates this infrastructure is designed to exploit trust in Twitter's platform while leveraging urgency tactics common in cryptocurrency scams. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered through Cloudflare's registrar on February 21, 2026, and currently resolves to 172.66.44.71 (AS13335, US). Security vendor detections show 5/95 engines flagging the domain on VirusTotal, while it appears on four distinct security blocklists including PhishDestroy and ScamSniffer. The Let's Encrypt SSL certificate (serial E8) provides encrypted connections to lend legitimacy to the fraudulent operation, a common tactic in modern phishing campaigns. Users who have visited lobstarismclaim.pages.dev should immediately revoke any connected sessions to their Twitter account and other linked services. Any credentials entered on this domain should be considered compromised and changed from a separate, secure device. Cryptocurrency wallet addresses provided through this site should be treated as malicious, and users should verify all recent transactions for unauthorized activity. Organizations should add this domain and its resolving IP to internal blocklists, while security teams should monitor for related infrastructure patterns using the seed identifier bf12ce in threat intelligence platforms.