claim-nologo[.]pages[.]dev

The domain claim-nologo.pages.dev was observed serving a page titled "Nologo | Airdrop" and is classified as a fake airdrop crypto drainer. The site was hosted behind Cloudflare infrastructure, resolving to IP 188.114.97.3, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. SSL termination is provided by Google Trust Services under the WE1 certificate, indicating a valid TLS certificate but offering no assurance of legitimacy. HTTP responses return a 403 status code, suggesting that the content is restricted or intentionally hidden from casual browsers.

The domain is registered through Cloudflare, Inc., and its authoritative name servers are hans.ns.cloudflare.com and love.ns.cloudflare.com. Reputation checks show a Gridinsoft trust score of 0 out of 100, and the domain appears on four security blocklists, specifically PhishDestroy, MetaMask, ScamSniffer, and SEAL. VirusTotal analysis recorded scans from 91 vendors, none of which flagged the domain at the time of assessment; this lack of detections does not imply safety. The known phishing kit is identified as an "Airdrop Scam" kit, aligning with the fake airdrop narrative.

Current operational status is offline, and the domain has been taken down. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑hosting attempts, and incorporate the listed blocklist identifiers into threat‑intel feeds. Ongoing observation is recommended to detect potential resurgence or related infrastructure reuse.