x-eligibility-portal[.]pages[.]dev

The domain x-eligibility-portal.pages.dev is currently active and involved in an Airdrop Scam, specifically impersonating the XRPFi Airdrop. This scam is flagged by 1 out of 92 vendors on VirusTotal, indicating its malicious nature. The domain is also listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL, highlighting the risk it poses to unsuspecting users.

Registered through Cloudflare, Inc. and hosted on IP address 188.114.96.3 in Canada, this domain leverages the Let's Encrypt SSL issuer to appear legitimate. The platform risk score for this domain is notably high at 83 out of 100, underscoring the potential threat level. Scammers often exploit Airdrop scams by luring victims with promises of free cryptocurrency, only to steal sensitive information or funds.

PhishDestroy detected this domain on the same day it was created, May 11, 2026. This rapid detection is crucial as it allows for timely intervention before the domain can cause significant harm. The presence of only one detection on VirusTotal suggests that this domain is relatively new and may not yet be widely recognized by other security vendors. This emphasizes the importance of early detection systems in identifying threats before they propagate widely.

The impersonation of the XRPFi Airdrop is a tactic used to exploit the popularity of cryptocurrency airdrops, a common method for scammers to deceive users. By appearing as a legitimate opportunity, these scams can effectively trick individuals into providing personal information or transferring funds. Users should be aware of such tactics and verify the legitimacy of airdrop offers before engaging with them.