base-website-90x[.]pages[.]dev

The domain base-website-90x.pages.dev was observed hosting a crypto‑scam page titled “DOGE: Department of Government Efficiency”. Registration information shows it was created on 17 January 2025 through Cloudflare, Inc., and the authoritative nameservers are annabel.ns.cloudflare.com and elliott.ns.cloudflare.com. DNS resolution points to the IP address 172.66.44.81, which belongs to AS13335 Cloudflare, Inc., and is geolocated in the United States. The HTTPS service uses a Google Trust Services / WE1 certificate and advertises HSTS and HTTP/3, indicating a modern TLS configuration.

HTTP queries return a 403 status code, and Gridinsoft assigns a trust score of 0 / 100, reflecting extreme risk. VirusTotal analysis records 14 detections out of 95 scanned vendors, and the domain appears on a single public blocklist. It has also been flagged by the PhishDestroy blocklist. The available intelligence classifies the activity as a “Crypto Scam”.

The current operational status is listed as offline, and no further content was retrieved during the assessment. Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms, as the page content has not been captured. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the Cloudflare nameservers, and add the IP address 172.66.44.81 to blacklist lists. Ongoing vigilance is advised in case the infrastructure is re‑used for new phishing or crypto‑draining campaigns.