quest-unichs[.]pages[.]dev

This domain is flagged as a high-risk brand impersonation threat designed to deceive users into participating in a fraudulent cryptocurrency airdrop. The site mimics legitimate token distribution campaigns, likely aiming to harvest wallet credentials or deploy malicious smart contracts that drain funds from connected crypto wallets. Victims may be tricked into signing transactions that grant attackers access to their assets under the guise of claiming free tokens or verifying eligibility for an airdrop. Analysis indicates the domain was registered on May 11, 2026, through Cloudflare Pages, a platform often abused for rapid deployment of phishing infrastructure. Only 2 out of 95 security vendors on VirusTotal currently detect this domain, suggesting it remains under the radar for most detection systems. The site resolves to the IP address 188.114.96.3, a Cloudflare-hosted endpoint, and is blocked by three security blocklists, including MetaMask and SEAL. The SSL certificate is issued by Google Trust Services, adding a false sense of legitimacy to the fraudulent page. Users who visited this domain should immediately disconnect any connected wallets and revoke permissions for suspicious smart contracts via their wallet’s settings. Scan the device for malware, as some crypto drainers deploy additional payloads. Monitor wallet activity for unauthorized transactions and report the incident to relevant blockchain explorers or security platforms. Avoid interacting with any links or prompts from the site, and verify airdrop legitimacy only through official project channels.