stakefish-airdrop[.]pages[.]dev

PhishDestroy identifies stakefish-airdrop.pages.dev as a high-risk domain specifically engaged in brand impersonation through an airdrop scam. This domain attempts to deceive users by mimicking legitimate airdrop offers, posing a significant threat of financial loss or credential theft to unsuspecting individuals.

The domain stakefish-airdrop.pages.dev is currently active and has been flagged on 2 security blocklists, including Enkrypt and ScamSniffer. VirusTotal data reveals that 2 out of 95 security vendors detect this domain as malicious. It resolves to the IP address 188.114.97.3 and is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services. The domain’s page title, "Claim Airdrop now," is a clear attempt to lure targets into fraudulent activity. Its presence on multiple blocklists and low trust signals underscore the considerable risk it poses.

To mitigate the threat from this airdrop scam, users should avoid visiting or interacting with stakefish-airdrop.pages.dev. Security teams should configure web filters and endpoint protection solutions to block access to this domain and similar airdrop impersonation sites. Educating users about recognizing brand impersonation and suspicious airdrop offers is critical to preventing compromise. Continuous monitoring for new impersonation domains using Cloudflare and other registrars will further reduce exposure to this type of scam.