11e7a932-d733-4749-ba10-e31478422b84[.]pages[.]dev

This domain, 11e7a932-d733-4749-ba10-e31478422b84.pages.dev, is flagged as a high-risk brand impersonation threat. It impersonates an airdrop scam, potentially leading users to enter sensitive information such as private keys or cryptocurrency wallet addresses. The threat is designed to deceive users by mimicking legitimate airdrop services, thereby compromising their financial assets and personal data.

Analysis indicates that the domain has been flagged by 2 out of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion. The domain was created on June 09, 2026, and is registered through Cloudflare Pages. It resolves to the IP address 172.66.44.152 and is currently still active. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users. The domain appears on two security blocklists, specifically PhishDestroy and ScamSniffer.

If users have visited this domain, they are advised to immediately change any passwords or private keys that were entered on the site. They should also monitor their cryptocurrency wallets and accounts for any unauthorized transactions. Users are recommended to use reputable airdrop services and to verify the authenticity of any airdrop offers through official channels before engaging. Additionally, enabling two-factor authentication (2FA) and using a password manager can help mitigate the risk of future compromises.