scottytheai-def[.]pages[.]dev

This domain is flagged as an elevated-risk crypto AI investment scam targeting cryptocurrency users through deceptive artificial intelligence trading platform claims. Analysis indicates the infrastructure was specifically designed to impersonate legitimate automated trading services while harvesting credentials and funds. Infrastructure analysis reveals the domain scottytheai-def.pages.dev was registered through Cloudflare on June 01, 2026, resolving to IP address 188.114.96.3. Security vendor detection shows 3 out of 95 engines on VirusTotal flagging the domain, with three independent security blocklists (PhishDestroy, Enkrypt, ScamSniffer) confirming malicious activity. The site employed Google Trust Services SSL certificate and utilized multiple tracking technologies including Google Tag Manager, Google Analytics, Adform, and Cloudflare's HTTP/3 protocol with HSTS implementation. Organizations should implement immediate mitigation measures including adding the domain and associated IP 188.114.96.3 to web filtering systems and security gateways. Security teams should monitor for credential submission attempts to this domain in historical logs and alert users who may have interacted with the site. Given the crypto-focused nature of the scam, financial transaction monitoring should be enhanced for any connections to this infrastructure, particularly for AI-related investment claims. The domain's offline status should not preclude retrospective analysis of network traffic and endpoint activity.