airdrop-boundless-network[.]pages[.]dev

Analysis of airdrop-boundless-network.pages.dev shows a short‑lived domain created on February 21, 2026 that was registered through Cloudflare, Inc. The site resolves to IP address 172.66.47.43, an address announced by AS13335 Cloudflare and geolocated to the United States. No SSL certificate is associated with the host, indicating that the site was served over plain HTTP. The page title returned by the server is "ZKC Airdrop Claim," matching the declared scam type of a Fake Airdrop. Threat intelligence tags the site as employing an Airdrop Scam phishing kit, a pattern frequently observed in crypto‑drainer campaigns.

VirusTotal scanning recorded a single positive detection out of 93 security vendors, and the domain appears on one public blocklist. PhishDestroy has listed the domain as blocked, and the current operational status is offline. The available evidence confirms that the infrastructure was intentionally leveraged to lure victims with a purported ZKC token airdrop, a classic social‑engineering lure in the cryptocurrency space.

Uncertainty remains regarding the scale of victim interaction and any downstream cryptocurrency wallet compromise, as no additional forensic artifacts have been disclosed. Defenders should continue to monitor Cloudflare‑hosted IP ranges for similar patterns, enforce strict HTTP‑to‑HTTPS redirection policies, and ensure that URL filtering solutions block the domain and its IP address. Incident response teams encountering related traffic should treat any credential or wallet address submissions as compromised and advise affected users to rotate credentials and secure their crypto assets.