claimpinet[.]site

The domain www.claimpinet.site was registered on February 21, 2026 through HOSTINGER operations, UAB and uses the authoritative nameservers ns1.vercel-dns.com and ns2.vercel-dns.com. DNS resolution points to the IPv4 address 64.29.17.1, which is announced by AS16509 belonging to Amazon.com, Inc. and geolocated to the United States. No TLS certificate is presented, indicating the site was served over plain HTTP at the time of observation. The only visible HTML element is the page title “Pi Airdrop”, consistent with the classification of the site as a crypto‑drainer scam that employs the publicly known “Airdrop Scam” phishing kit.

The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service. On VirusTotal the host received a detection score of 2 out of 93 scanned security vendors, confirming that at least two independent engines flagged the domain as malicious. The site’s current operational status is offline, and it no longer serves content.

Although the infrastructure appears to rely on reputable cloud hosting, the combination of recent registration, lack of encryption, targeted page title, and the presence on a blocklist strongly suggest a purposeful campaign aimed at extracting cryptocurrency from unsuspecting users. Defenders should continue to enforce deny‑list rules for the IPv4 address 64.29.17.1, incorporate the domain into URL filtering policies, and monitor for any re‑registration attempts that reuse the same registrar or hosting provider. Additional threat‑intel feeds should be consulted for potential variations of the Airdrop Scam kit, and organizations should educate users about unsolicited “airdrop” offers that direct victims to non‑TLS sites such as this one.