cryptoism-new[.]pages[.]dev

Analysis of cryptoism-new.pages.dev shows a newly registered site (creation date 2026-06-09) hosted on Cloudflare Pages and resolving to IP 188.114.96.3, which GeoIP attributes to Canada and is owned by Cloudflare, Inc. The site presents the page title "Cryptoism - Your partner to explore Web3, Node Tutorial and Airdrops," and its TLS certificate is issued by Google Trust Services under the WE1 root. Detected technologies include OneSignal, HSTS, Cloudflare services, and HTTP/3. Security telemetry indicates a Gridinsoft trust score of 0/100, classification as an "Airdrop Scam" kit, and a specific label of "Fake Airdrop". The domain is currently active, returns HTTP 200, and has been blocked by PhishDestroy and appears on one external blocklist. While VirusTotal scans by 91 vendors reported no detections, the absence of flags does not constitute evidence of benign intent. The limited evidence points to a phishing campaign that leverages the allure of cryptocurrency airdrops to lure victims. Uncertainties remain regarding the exact content served to end users, the credential collection mechanisms employed, and any downstream command‑and‑control infrastructure. Defenders should block the domain at network perimeters, monitor DNS queries for the host, and enforce strict outbound filtering for connections to the associated IP address. Continuous observation of the domain’s activity and rapid updating of blocklists are recommended, as the investigation remains open.