testnet-airdrops[.]pages[.]dev

This domain is flagged for brand impersonation targeting Discord users through fraudulent crypto airdrop promotions. The site presents itself as a guide for "2025 Testnet Airdrops," a common tactic to lure individuals into interacting with malicious content. Such impersonation attempts often aim to harvest credentials, distribute malware, or trick users into transferring cryptocurrency under false pretenses. Analysis indicates the domain was registered on February 16, 2025, through Cloudflare, Inc., and currently resolves to the IP address 172.66.44.68, hosted on Cloudflare’s network (AS13335). VirusTotal reports 0 detections out of 95 security engines, suggesting it has not yet been widely flagged. The SSL certificate is issued by Google Trust Services, which does not inherently validate the site’s legitimacy. The domain appears on one security blocklist, specifically PhishDestroy, further supporting suspicions of malicious intent. If you visited testnet-airdrops.pages.dev, immediately cease all interaction with the site. Check for unauthorized activity on your Discord account, including linked devices, connected applications, or unusual messages sent from your profile. Reset your Discord password using a strong, unique passphrase and enable multi-factor authentication if not already active. Monitor connected cryptocurrency wallets for unauthorized transactions, as brand impersonation sites often attempt to drain funds. Report the domain to Discord’s official support channels to assist in mitigating further abuse.