elonairdrop-reward[.]pages[.]dev

This domain, elonairdrop-reward.pages.dev, is flagged as a high-risk brand impersonation campaign targeting cryptocurrency users through a fraudulent airdrop scheme. The page title, 'Elon Musk Bitcoin Airdrop | Official,' explicitly impersonates a well-known public figure to lend credibility to the scam, a tactic commonly associated with cryptocurrency drainer kits designed to siphon digital assets from victims. Analysis indicates the domain is structured to mimic legitimate promotional events, leveraging social engineering to exploit trust in the targeted brand. Infrastructure analysis reveals the domain was registered through Cloudflare Pages on April 11, 2026, and resolves to the IP address 188.114.96.3. Detection metrics from aggregated threat intelligence platforms show 13 out of 95 security vendors flagging the domain as malicious, while it appears on a single security blocklist. The domain employs a Let's Encrypt SSL certificate (identifier YE2), which, while providing encryption, does not validate legitimacy. Google Safe Browsing (GSB) does not currently list the domain, though this may reflect a lag in detection rather than an absence of risk. As of the latest assessment, elonairdrop-reward.pages.dev remains active and unmitigated, posing a continued threat to users encountering the fraudulent airdrop promotion. The domain's hosting on a widely used content delivery network complicates takedown efforts, as the registrar provides infrastructure rather than direct content oversight. Users are advised to verify promotional claims through official channels and exercise caution when interacting with unsolicited cryptocurrency offers. Organizations should update blocklists to include this domain and monitor for related infrastructure, such as the associated IP address, to prevent further exploitation.