dropdexfinal[.]pages[.]dev

The domain dropdexfinal.pages.dev was registered on 2026-04-19 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 172.66.47.91 located in Canada. The authoritative nameservers are anita.ns.cloudflare.com and nick.ns.cloudflare.com, indicating the use of Cloudflare’s CDN and DNS services. TLS termination is performed by Google Trust Services (certificate issued to WE1) and the site enforces HSTS and HTTP/3. Google Analytics scripts are present, confirming analytics capability. The page title observed is “DropDex Pokémon Restock Discord – Free 7‑Day Trial (No Card Required)”, and the content claims affiliation with Discord, matching the declared brand target. The activity is classified as a crypto‑drainer campaign that leverages brand impersonation to lure victims into providing cryptocurrency wallet credentials or sending funds. The domain appears on a single blocklist (PhishDestroy) and has not been flagged by any of the 94 VirusTotal scanners at the time of analysis, though the absence of detections does not confirm safety. Current intelligence does not provide a full payload or command‑and‑control profile, and the exact phishing landing page content has not been captured. Defensive operators should block both the domain and its resolved IP, monitor DNS queries for the associated Cloudflare nameservers, and consider sinkholing the address to disrupt traffic. Users of the Discord platform should be warned that any unsolicited offers for a “free 7‑day trial” without a card requirement are not sanctioned by Discord and may result in loss of cryptocurrency assets.