airdrop-6nr[.]pages[.]dev

PhishDestroy identifies airdropp-6nr.pages.dev as an active brand impersonation domain targeting the Airdrop Scam brand under investigation. This domain is currently flagged with a status of active and poses a direct threat to users seeking legitimate Airdrop promotions or services.

This domain resolves to IP address 172.66.44.73 and is registered through Cloudflare, Inc. It holds an SSL certificate issued by Google Trust Services, which may contribute to a false sense of security among visitors. Notably, VirusTotal currently reports 0 detections out of 95 security vendor scans, indicating that mainstream detection systems have not yet flagged this domain as malicious. The absence of detections highlights the risk of zero-day phishing campaigns leveraging reputable infrastructure providers like Cloudflare.

As the investigation remains active, users are strongly advised to avoid interacting with airdropp-6nr.pages.dev or any associated links. Organizations should consider blocking this domain at the network perimeter and updating browser-based blocklists. Users who may have engaged with this domain are urged to review account credentials, enable multi-factor authentication, and monitor for unusual activity. Cloudflare users are recommended to report this domain through Cloudflare’s abuse channels to expedite takedown efforts.