airdropgeneral[.]pages[.]dev

This domain airdropgeneral.pages.dev was registered on 2026-02-21 through Cloudflare, Inc. and resolves to IP 172.66.47.94, an address owned by AS13335 Cloudflare, Inc. in the United States. The authoritative nameservers are barbara.ns.cloudflare.com and zahir.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. HTTPS is provided by a Google Trust Services / WE1 certificate and the site enforces HSTS, supports HTTP/3, and is built with the Astro framework. The page title returned by the server is “Home • Citrus”, and the HTTP response code is 200. Intelligence classifies the site as a “Fake Airdrop” campaign that impersonates the brand “across”. The domain appears on a single security blocklist and has been reported as blocked by PhishDestroy. A Gridinsoft trust score of 0/100 further reflects a high likelihood of malicious intent. No additional artifacts such as malware hashes or phishing page content have been disclosed. Given the active status and the infrastructure characteristics, defenders should consider adding the domain to deny‑list rules, monitor DNS queries for the associated IP range, and enforce endpoint protection that flags connections to Cloudflare‑hosted phishing infrastructure. Continuous observation is recommended to detect any evolution of the campaign or emergence of new indicators.