asdasd-4ei[.]pages[.]dev

Analysis indicates that the domain asdasd-4ei.pages.dev was registered on March 9, 2026 through Cloudflare, Inc. and is hosted behind Cloudflare’s network (ASN 13335). The domain resolves to IP 188.114.96.3, which is part of Cloudflare’s edge infrastructure located in the United States. TLS termination is provided by a Google Trust Services certificate (WE1) and the site enforces HTTP Strict Transport Security and supports HTTP/3, confirming modern web delivery. The page title observed is "Zeta Markets - Rewards", and the listed scam type is a "Fake Airdrop" that impersonates the Across brand. The site has been flagged by PhishDestroy and ScamSniffer and appears on two public blocklists. Gridinsoft assigns a trust score of 0/100, and VirusTotal reports two detections out of 94 scanned engines. The current risk rating is high and the domain remains active. Evidence confirms the use of Cloudflare’s DNS (nameservers roxy.ns.cloudflare.com and yichun.ns.cloudflare.com) and the presence of HSTS, indicating that the operator is leveraging reputable infrastructure to increase credibility. The exact content of the landing page has not been examined, so the specific tactics used to harvest credentials or distribute the fraudulent airdrop remain unknown. No additional infrastructure such as command‑and‑control servers or payment processors has been identified. Defenders should block the domain at DNS and proxy layers, add the IP address 188.114.96.3 to firewall deny lists, and monitor for any traffic matching the "Zeta Markets - Rewards" title pattern. Threat‑intel feeds should be updated to include the domain and its associated indicators. Continuous re‑scanning is recommended to detect any changes in the hosting configuration or detection status.