bab95aa8-0ef6-4107-b7ac-d7ac21c7de1a[.]pages[.]dev

The domain bab95aa8-0ef6-4107-b7ac-d7ac21c7de1a.pages.dev is flagged for brand impersonation, specifically targeting individuals involved in cryptocurrency through Airdrop scams. The page title indicates it is an 'Airdrop Checker', which is designed to lure users into providing sensitive information under the guise of verifying airdrop opportunities. This represents a significant threat as it exploits the trust associated with cryptocurrency projects to deceive users.

Analysis of the domain reveals critical security indicators: it has a VirusTotal detection score of 1 out of 95, meaning only one security vendor has flagged it, which can lead to a false sense of security among users. The domain was created on September 27, 2024, and is registered through Cloudflare Pages, an infrastructure often used to host web applications. It currently appears on two security blocklists, indicating it has been identified as a threat by multiple sources. The SSL certificate is provided by Google Trust Services, further legitimizing the domain through encryption but does not mitigate the malicious intent.

Users who have visited this domain should immediately cease any interaction and refrain from entering personal information. It is advised to review their digital security practices, such as changing passwords, enabling two-factor authentication where applicable, and monitoring for any unusual account activity. Additionally, users should report the domain to their security teams or relevant authorities to prevent further exploitation.