crypto-subscription[.]pages[.]dev

The domain crypto-subscription.pages.dev is a generic phishing site designed to deceive users with a fake airdrop scam. It does not impersonate a specific brand or use a known drainer kit. As of the latest verification, crypto-subscription.pages.dev has been taken offline, but it previously posed a risk of credential theft or financial fraud through fraudulent cryptocurrency offers.

Technical indicators show crypto-subscription.pages.dev was registered through Cloudflare, Inc. on April 23, 2023. It resolved to the IP address 172.66.47.136, located in Canada under Cloudflare, Inc. The domain appeared on 1 security blocklist (PhishDestroy) but had 0 of 95 detections on VirusTotal and was not flagged by Google Safe Browsing. No SSL certificate was issued, and the observed page title was absent. Technologies detected included HSTS, Cloudflare, and HTTP/3, with nameservers rafe.ns.cloudflare.com and will.ns.cloudflare.com.

Users who interacted with crypto-subscription.pages.dev should immediately change any credentials entered on the site and enable two-factor authentication on affected accounts. Monitor financial transactions for unauthorized activity and report the domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. If cryptocurrency was involved, revoke any token approvals granted to suspicious contracts and consider moving funds to a new wallet for added security.