pippin[.]love-reward[.]app

Analysis of the domain pippin.love-reward.app indicates it was operational as a fake airdrop phishing site prior to being taken offline. The domain was registered through Cloudflare, Inc. and resolved to the IP address 188.114.96.3, which is hosted on AS13335 (Cloudflare, Inc.) in the United States. As of July 24, 2026, the domain appears on two security blocklists and is actively blocked by PhishDestroy and ScamSniffer. The HTTP response code for the domain is 403, and the page title displayed is 'Just a moment...', a common placeholder used by Cloudflare during initial setup or when access is restricted. No nameservers are currently configured, which may indicate recent deactivation or infrastructure changes.

The domain was flagged by 11 out of 95 security vendors on VirusTotal, confirming its classification as malicious. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider, but this does not mitigate the domain's fraudulent intent. Detected technologies include Cloudflare and HTTP/3, which are consistent with modern web hosting but do not provide additional context about the phishing kit or specific targeting methods. The scam type is explicitly identified as a fake airdrop, suggesting the domain was used to deceive users into disclosing credentials or transferring assets under the guise of a cryptocurrency giveaway. Defenders should treat this domain as a confirmed phishing threat.

Although it is currently offline, historical resolution to 188.114.96.3 and its presence on blocklists warrant continued monitoring. Organizations should ensure that endpoint protection and network security tools are configured to block both the domain and its associated IP. If the domain reactivates, further analysis of its content and payload delivery mechanisms will be necessary. No additional brand-specific targeting or kit details are available at this time.