kujeza[.]pages[.]dev

The domain kujeza.pages.dev has been identified as a brand_impersonation threat targeting Robinhood, specifically masquerading as a Robinhood Chain Testnet Faucet. As of the latest assessment, the domain is offline, though it remains under investigation for its deceptive infrastructure and intent. Analysis indicates the domain was registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. It was created on February 20, 2026, and currently appears on one security blocklist. The domain employs a Let's Encrypt SSL certificate and utilizes technologies such as HSTS, Cloudflare, and HTTP/3. Detection metrics reveal that 0 of 95 vendors on VirusTotal have flagged the domain, and its Gridinsoft trust score is 0/100. The page title, Robinhood Chain Testnet Faucet, explicitly suggests an attempt to deceive users by leveraging the Robinhood brand. Given the domain's current offline status, no active threat is present; however, the infrastructure remains suspicious. Organizations and users are advised to monitor for reactivation, block the domain and associated IP address (188.114.97.3) at the network level, and report any re-emergence to relevant security platforms. Enhanced scrutiny of domains registered through similar infrastructure is recommended to mitigate potential future risks.