bossairdrop[.]pages[.]dev

The domain bossairdrop.pages.dev is flagged for brand impersonation, specifically impersonating an airdrop scam. The domain is currently active and poses a high risk to users. Analysis indicates that the domain impersonates a revenue share airdrop, potentially misleading individuals into providing sensitive information or financial details.

Infrastructure analysis reveals that the domain resolves to the IP address 188.114.97.3, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to users. The domain was created on February 16, 2025, and is registered through Cloudflare, Inc. It appears on 1 security blocklist and has been flagged by 1 out of 95 security vendors on VirusTotal. These indicators suggest a recent and potentially sophisticated campaign.

The domain remains active, and users are advised to exercise extreme caution when encountering this site. It is recommended that security teams and network administrators block access to this domain to prevent potential phishing attacks. Additionally, users should verify the legitimacy of any airdrop offers through official channels and avoid providing personal or financial information to unverified sources.