airdrop-250[.]pages[.]dev

This domain, airdrop-250.pages.dev, was registered on June 07 2026 via Cloudflare Pages and currently resolves to the IP address 172.66.47.26. Multiple threat intelligence sources have flagged it: it appears on four security blocklists and is explicitly blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL. VirusTotal records show that 11 of 91 scanned security vendors label the domain as malicious, and Google Safe Browsing classifies it as a social‑engineering threat.

The listed threat type is a crypto drainer, indicating that the site is likely used to lure victims into transferring cryptocurrency assets to addresses controlled by the adversary. No publicly available page title, SSL certificate details, or HTTP response codes have been disclosed, so the exact content and delivery mechanisms remain unverified. Defenders should treat the domain as high‑risk and active.

Recommended actions include adding the domain and its resolved IP to network‑level deny lists, updating DNS filtering policies to block the host, and ensuring that web‑filtering solutions reference the four blocklists that already list it. Continuous monitoring for any new resolution changes or associated subdomains is advised, and any detection of credential or wallet address submission to this host should be investigated as a potential compromise. Organizations using MetaMask or similar wallet extensions should enforce strict origin checks to prevent unauthorized transaction signing on this domain.