claim-jotchua[.]pages[.]dev

This domain, claim-jotchua.pages.dev, is flagged as an active airdrop scam targeting users through brand impersonation. The site mimics legitimate cryptocurrency airdrop promotions to deceive victims into disclosing credentials or transferring assets. Analysis confirms its current operational status, posing a high-risk threat to unsuspecting users. Infrastructure analysis reveals the domain was registered on June 08, 2026, via Cloudflare Pages and resolves to the IP address 172.66.47.167. Security vendor detections include 10 of 95 flags on VirusTotal, while four independent blocklists—PhishDestroy, MetaMask, ScamSniffer, and SEAL—have classified it as malicious. The SSL certificate is issued by Google Trust Services under the identifier WE1, a common pattern observed in low-reputation or fraudulent deployments. The domain remains active as of this report, with no indications of takedown or mitigation. Users are advised to block all connections to 172.66.47.167 and claim-jotchua.pages.dev at the network perimeter. Security teams should update detection rules to include this domain and IP in threat intelligence feeds. Verification of cryptocurrency wallet addresses promoted on the site is strongly recommended to prevent asset loss.