azuro-app-airdrop[.]pages[.]dev

Domain azuro-app-airdrop.pages.dev is currently active and engaged in a brand impersonation scam targeting Airdrop Scam. This campaign leverages deceptive tactics to deceive users into divulging sensitive information or transferring cryptocurrency. The threat actor behind this operation has registered the domain through Cloudflare, Inc., and utilizes Cloudflare's infrastructure to host malicious content. The campaign's current status remains active, with ongoing efforts to propagate the fraudulent domain across unsuspecting users. This domain resolves to IP address 172.66.47.65 and has been flagged by 1 of 95 VirusTotal security vendors, indicating a low but notable detection rate. The domain is registered through Cloudflare, Inc., leveraging the company’s reputation to evade initial scrutiny. It has appeared on 2 distinct security blocklists, further validating its malicious nature. Despite its malicious intent, the domain holds valid SSL certification via Google Trust Services, employing a facade of legitimacy to gain user trust. Its recent registration and low detection rate suggest an evolving threat actively seeking to compromise unsuspecting users. Given its active status and deployment on Cloudflare infrastructure, this domain poses an elevated risk to users engaging with it. Immediate action is recommended to block azuro-app-airdrop.pages.dev at the network perimeter and endpoint levels. Organizations should update their threat intelligence feeds and firewall rules to prevent access to this domain. Additionally, users should be warned against interacting with unsolicited airdrop-related communications and verify the authenticity of any airdrop campaigns through official channels. Security teams are advised to monitor for related infrastructure or domains that may emerge as this campaign continues to evolve.