claim-trololol[.]pages[.]dev

This domain, claim-trololol.pages.dev, operates as a high-risk brand impersonation site targeting Instagram users with a fraudulent cryptocurrency scheme. The page title, 'TROLL COIN ON SOLANA,' suggests an attempt to lure victims into interacting with a crypto drainer or fake token distribution, a common tactic used to steal digital assets or credentials under the guise of legitimate promotions. Analysis indicates the domain is designed to mimic Instagram’s branding, exploiting user trust in the platform to facilitate financial fraud or credential theft. Infrastructure analysis reveals the domain was registered on August 27, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.44.128, hosted on Cloudflare’s network (AS13335). Security vendors have flagged the domain, with VirusTotal reporting 3 out of 95 detections, while it appears on two independent security blocklists. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as malicious actors frequently leverage legitimate certificate authorities to lend credibility to phishing infrastructure. The domain remains active as of the latest verification, indicating ongoing malicious intent. Users who have visited claim-trololol.pages.dev should immediately cease all interaction with the site and revoke any permissions granted to connected cryptocurrency wallets or applications. If credentials were entered, they should be changed across all platforms where reused, and multi-factor authentication should be enabled where available. Devices used to access the site should undergo a security scan to detect potential malware or unauthorized access. Given the domain’s association with crypto-related fraud, victims should also monitor connected wallet addresses for unauthorized transactions and report the incident to relevant financial or cybersecurity authorities for further investigation.