getmoney-distribution[.]pages[.]dev

The domain getmoney-distribution.pages.dev is classified as a high-risk threat specializing in fee distribution phishing scams. This specific attack targets users by impersonating legitimate financial distribution services to steal sensitive credentials or funds. The campaign remains active, posing significant danger to unsuspecting victims.

VirusTotal analysis reveals that 4 out of 95 security vendors have flagged this domain, confirming its malicious nature. The domain is registered through Cloudflare, Inc., and uses a Let's Encrypt SSL certificate, which can lend a false sense of security to victims. It resolves to the IP address 172.66.44.99 and currently appears on two independent security blocklists, including MetaMask and SEAL, both of which actively block it. The page title "Fee Distribution" is likely crafted to lure users seeking legitimate transaction processing.

To mitigate risks from this fee distribution phishing threat, users should avoid interacting with this domain or sharing personal or financial data. Security teams should block the domain and IP address at network perimeters and ensure endpoint protection solutions are updated to recognize this threat. Educating users about the dangers of unsolicited fee distribution links and verifying domain legitimacy prior to engagement are critical steps to prevent compromise.