claimairdroponsol[.]pages[.]dev

This domain, claimairdroponsol.pages.dev, is actively engaged in brand impersonation targeting the Across protocol, a cross-chain bridging platform. The site presents itself as a legitimate airdrop or reward claim portal under the title 'BlockchainClaim,' designed to deceive users into connecting cryptocurrency wallets or entering sensitive credentials. Such schemes typically facilitate crypto drainer attacks, where malicious smart contracts or scripts siphon funds from victims' wallets upon interaction, often resulting in irreversible asset loss. Analysis indicates the domain was registered on February 14, 2025, through Cloudflare, Inc., a registrar frequently exploited due to its privacy and proxy services. Security vendors on VirusTotal have flagged the domain as malicious, with 11 out of 95 engines detecting it as a threat. The domain resolves to the IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335), which obscures the true origin of the attack. Google Safe Browsing has classified the site as phishing, and it appears on at least one security blocklist, further corroborating its malicious intent. Users who have visited claimairdroponsol.pages.dev or interacted with its content should immediately revoke any wallet permissions granted to the site. Disconnect all connected wallets and audit recent transactions for unauthorized activity. If credentials or private keys were entered, migrate assets to a new wallet and monitor for signs of compromise. Report the domain to relevant security teams or threat intelligence platforms to aid in takedown efforts. Exercise caution with unsolicited airdrop claims, particularly those hosted on newly registered domains or third-party platforms.