zew32523[.]pages[.]dev

The domain zew32523.pages.dev is currently active and classified as a high‑risk generic_phishing site delivering a Fake Airdrop scam. The site was created on 22 January 2025 and is hosted on Cloudflare Pages, resolving to the IP address 188.114.97.3, which is associated with Cloudflare, Inc. in Canada. TLS termination is provided by a Google Trust Services certificate issued to the WE1 endpoint, confirming the use of a legitimate certificate authority. The page title returned by the server is "Kontos Airdrop," matching the declared scam type. HTTP response code 200 is observed, and the site enforces HSTS while supporting HTTP/3. Front‑end assets include SweetAlert2, jsDelivr, cdnjs, and other Cloudflare‑served resources. The Gridinsoft trust score is 0 out of 100, indicating a lack of trustworthiness. The domain appears on two security blocklists—PhishDestroy and ScamSniffer—and one of ninety‑one VirusTotal scanners flagged the domain. No additional content analysis is available, so the exact malicious payload or credential‑harvesting mechanisms remain unverified. Defenders should add zew32523.pages.dev to network deny lists, monitor DNS queries for the associated IP, and update URL filtering rules to block the identified host. Continuous observation is advised to detect any changes in the site’s infrastructure or hosting configuration.