3ton-airdrop[.]pages[.]dev

This domain, 3ton-airdrop.pages.dev, is flagged as a high-risk crypto drainer associated with a fake airdrop campaign. It was created on June 9, 2026, and remains active as of this report. The page title is '3TON - Artificial Intelligence 3.0,' suggesting it impersonates a project related to the 3TON ecosystem, likely to deceive users into connecting wallets or granting permissions that lead to asset theft. Infrastructure analysis reveals it is hosted via Cloudflare Pages, resolving to IP 172.66.47.47 in Canada, with an SSL certificate from Google Trust Services. The domain appears on four security blocklists, including PhishDestroy, MetaMask, SEAL, and ScamSniffer, and has a Gridinsoft trust score of 0/100. VirusTotal scanned it with 91 vendors, but none currently flag it; however, the absence of detections does not confirm safety. Detected technologies include jQuery, OWL Carousel, jsDelivr, HSTS, Google Tag Manager, Google Analytics, crypto-js, and cdnjs, which are common in such fraudulent pages. The exact visual content of the page is not yet analysed, but the combination of a recent registration, blocklist presence, and fake airdrop threat type indicates a clear phishing operation. Defenders should block this domain and monitor for variations under pages.dev, while users should avoid interacting with it or connecting any cryptocurrency wallets. The domain is still serving an HTTP 200 status, meaning it is live and potentially targeting victims.