airdrops-nibirucom[.]pages[.]dev

The domain airdrops-nibirucom.pages.dev is actively involved in an airdrop scam, leveraging the name of Nibiru Chain to deceive users. It has been flagged by 15 out of 91 vendors on VirusTotal, indicating significant recognition as a malicious entity. The domain is hosted by Cloudflare, Inc., with an IP address located in Canada, and uses an SSL certificate issued by Google Trust Services.

This domain is particularly concerning due to its high platform risk score of 100/100, suggesting a well-crafted and potentially effective scam operation. It is listed on three public blocklists, including PhishDestroy, ScamSniffer, and Enkrypt, which further underscores its threat level. The use of Cloudflare's infrastructure may provide the scammers with a reliable and resilient hosting service, complicating efforts to take the site offline.

The impersonation of Nibiru Chain, a legitimate entity, is a common tactic in phishing schemes, aiming to exploit the trust users place in well-known brands. The domain's creation and detection on the same day, May 3, 2026, highlights the rapid deployment of this scam. Despite being flagged by multiple security vendors, the site remains active, posing a risk to unsuspecting users who may be lured by promises of free cryptocurrency through fraudulent airdrops.