airdrop-tracker-6fj[.]pages[.]dev

This domain, airdrop-tracker-6fj.pages.dev, is currently under investigation for brand impersonation targeting cryptocurrency users through a fraudulent airdrop scheme. The specific threat type is classified as an airdrop scam, with the page title explicitly displaying '3alamiy Web3 | Crypto Airdrop Tracker,' indicating an attempt to deceive users seeking legitimate cryptocurrency airdrops. The domain remains active as of the latest verification, posing an ongoing risk to unsuspecting visitors. Analysis of technical indicators reveals the following: the domain has been flagged by 0 of 95 vendors on VirusTotal, suggesting it has not yet been widely detected by security solutions. It is registered through Cloudflare Pages and resolves to the IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services (WE1), a common provider for both legitimate and malicious domains. The domain was created on February 11, 2026, and appears on at least one security blocklist. Infrastructure analysis indicates the use of Cloudflare's content delivery network, which is frequently leveraged to obscure the true origin of malicious sites and evade detection. The current status of airdrop-tracker-6fj.pages.dev remains active, with no signs of takedown or remediation. Users are strongly advised to avoid interacting with this domain, particularly refraining from entering any credentials, wallet addresses, or personal information. Security teams should update blocklists to include this domain and its associated IP address. Monitoring for similar domains registered through Cloudflare Pages with crypto-related keywords is recommended to preemptively identify related threats. Given the low detection rate, manual verification of any linked resources or external references is critical to assess potential secondary risks.