claim-sentient[.]pages[.]dev

Analysis of the domain claim-sentient.pages.dev indicates an active crypto drainer campaign targeting users through a fraudulent airdrop scheme. The domain, registered on March 23, 2026, via Cloudflare, Inc., resolves to the IP address 172.66.44.95 and is hosted behind Cloudflare infrastructure, which provides SSL encryption through Google Trust Services. The page title, 'Sentient Airdrop,' suggests an attempt to deceive users into engaging with a malicious cryptocurrency distribution claim. Twelve of ninety-five security vendors on VirusTotal have flagged this domain, while four independent security blocklists, including SEAL, MetaMask, ScamSniffer, and PhishDestroy, have classified it as malicious. The Gridinsoft trust score of 0/100 further corroborates its high-risk status. Infrastructure analysis reveals the use of jsDelivr, HSTS, and HTTP/3, which may be leveraged to enhance delivery speed and evade basic detection mechanisms. The domain remains active as of July 12, 2026, and is associated with a known airdrop scam phishing kit. Defenders should prioritize blocking this domain at the network and endpoint levels, particularly in environments where cryptocurrency transactions occur. Given the use of Cloudflare hosting, takedown efforts may require coordination with the registrar and hosting provider. No additional brand impersonation details are available at this time, but the presence of a crypto drainer classification warrants immediate mitigation.