pi-netairdrop[.]com

The domain pi-netairdrop.com was registered on May 22, 2025 through P.A. Viet Nam Company Limited and is currently resolved to the Cloudflare address 104.21.64.1 (AS13335, United States). The authoritative nameservers are keenan.ns.cloudflare.com and kristina.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and CDN services. No TLS certificate is presented for the host, which is consistent with the reported offline status; HTTP requests return no response, and the site is listed as taken offline by monitoring services.

The page title observed in prior crawls is "Pichainmall", and the scam is classified as a "Fake Airdrop" that purports to impersonate Google. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. VirusTotal analysis shows a single positive detection out of 95 scanned engines, and the domain appears on one external blocklist and is flagged by PhishDestroy. These indicators collectively suggest that the domain was used to lure victims with a fraudulent Google‑branded airdrop offering, likely to harvest credentials or install malware.

Because the site is currently offline, active exploitation may be limited, but the infrastructure—Cloudflare hosting, Vietnamese registrar, and absence of TLS—remains reusable for future campaigns. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration or similar sub‑domains hosted on the same IP range, and update threat‑intel feeds with the observed indicators. Additional analysis is required to confirm the exact payload or credential‑harvest mechanisms, as the content of the page has not been captured in the current dataset.