distribution-dogme[.]pages[.]dev

The domain distribution-dogme.pages.dev was registered on May 29, 2024 through Cloudflare Pages and resolves to the Cloudflare‑owned address 188.114.97.3, located in Canada. The site serves a page titled “Dog Runestone Airdrop” and is identified as an Airdrop Scam kit, consistent with the generic_phishing threat type. HTTP responses return status 200 and the site presents a valid SSL certificate issued by Google Trust Services (WE1). Technical fingerprints include SweetAlert2, crypto‑js, jsDelivr, cdnjs, HSTS enforcement, and HTTP/3, all delivered via Cloudflare’s CDN. Reputation data show the domain appears on five security blocklists and is actively blocked by PhishDestroy, MetaMask, SEAL, ScamSniffer, and Enkrypt. VirusTotal analysis records eight detections out of 91 scanners, and Gridinsoft assigns a trust score of 0 / 100, indicating a high likelihood of malicious intent. The infrastructure is typical of low‑cost phishing operations that leverage reputable hosting to evade simple URL filtering. While the page content has not been directly examined, the combination of a fabricated airdrop promise, known phishing kit usage, and multiple blocklist entries confirms a high‑risk profile. Defenders should immediately block the domain at network perimeters, update endpoint protection signatures, and monitor for related activity targeting cryptocurrency wallets. Continuous observation of Cloudflare‑originated IP ranges for similar patterns is advised, as attackers may reuse the same hosting environment for future campaigns.