claim-linhmai[.]pages[.]dev

This domain, claim-linhmai.pages.dev, is actively engaged in brand impersonation targeting Twitter users through a fraudulent airdrop scheme. Analysis indicates the page title explicitly references 'LinhMai | Airdrop,' a common tactic to lure victims into interacting with malicious content. The domain remains operational and poses a high risk to unsuspecting users seeking cryptocurrency or social media rewards. Infrastructure analysis reveals critical indicators of compromise. The domain was created on February 23, 2026, and is registered through Cloudflare, Inc., resolving to the IP address 172.66.44.184, located in the United States under AS13335 (Cloudflare, Inc.). Notably, the domain lacks an SSL certificate, a red flag for secure communication. Security vendors have flagged this domain, with 1 out of 95 VirusTotal engines detecting malicious activity. Additionally, the domain appears on four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL, further corroborating its malicious nature. The domain remains active as of this assessment, continuing to pose a significant threat to users. Organizations and individuals are advised to block access to this domain at the network level and update endpoint protection rules to include its IP address and domain name. Users should be educated on recognizing brand impersonation tactics, particularly those involving fake airdrops or giveaways. Monitoring for similar domains registered through Cloudflare or resolving to the same IP range is recommended to mitigate further risks.