claim-summerfi[.]pages[.]dev

The domain claim-summerfi.pages.dev was observed hosting a fake airdrop campaign that impersonates the cryptocurrency brand argent. The site was created on 21 February 2026 and is currently taken offline, returning HTTP 403 for all requests. Infrastructure analysis shows the domain resolves to 172.66.47.198, an address owned by AS13335 Cloudflare, Inc., located in the United States. Registration details indicate the domain is hosted through Cloudflare, Inc., using the authoritative name servers miles.ns.cloudflare.com and zita.ns.cloudflare.com. TLS termination is provided by a Google Trust Services certificate issued under the WE1 framework, and the service advertises HTTP/3 and HSTS support.

Reputation services flag the domain as highly malicious. Eight of ninety‑three VirusTotal scanners raised detections, and Google Safe Browsing categorizes the URL as social engineering. The domain appears on six independent blocklists and is actively blocked by PhishDestroy, MetaMask, Polkadot, SEAL, and Enkrypt, reinforcing its classification as a high‑risk threat. Gridinsoft assigns a trust score of 0 / 100, and the page title returned by the host is “Chain Solution Center,” which does not correspond to the targeted brand.

The evidence confirms a coordinated fake‑airdrop impersonation aimed at argent users. However, the exact payload or phishing page content has not been publicly disclosed, and no additional indicators such as malicious scripts or credential‑harvesting endpoints have been documented. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration attempts, and advise users not to interact with any claim‑summerfi.pages.dev URLs. Ongoing telemetry collection is recommended to capture any future activity if the site is re‑hosted.