alpha-sale[.]pages[.]dev

This domain, alpha-sale.pages.dev, is under investigation for credential phishing activity targeting users of a Web3 reservation platform, as indicated by its page title "ALPHA BUSD 抢购平台 | Web3 Reservation Platform." Registered on March 28, 2026, through Cloudflare, Inc., the domain currently resolves to IP 188.114.97.3, which is geolocated to Canada and associated with Cloudflare infrastructure. Analysis of the domain's infrastructure reveals the use of Cloudflare nameservers (penny.ns.cloudflare.com and rustam.ns.cloudflare.com), HTTP/3, and HSTS, alongside a Let's Encrypt SSL certificate (E7). The domain is actively serving a 403 HTTP status, which may indicate restricted access or a placeholder state, though it remains flagged by at least one security blocklist (PhishDestroy) and holds a Gridinsoft trust score of 0/100. No vendor detections were recorded in a VirusTotal scan conducted by 94 engines, though the absence of detections does not confirm the domain's legitimacy. The scam type is classified as credential phishing, though the exact mechanics of the attack—such as whether it targets cryptocurrency wallets, login credentials, or other sensitive data—remain unconfirmed due to limited visibility into the site's content. Defenders should treat this domain as high-risk until further analysis is completed. Recommended actions include monitoring for connections to this domain, blocking it at the network level if observed in logs, and investigating any user reports of interaction with the site. Additional scrutiny of Cloudflare-hosted subdomains with similar naming patterns may also be warranted.