claim-moltbook[.]pages[.]dev

The domain claim-moltbook.pages.dev is currently flagged as an active brand impersonation threat, specifically designed to conduct an airdrop scam. Analysis indicates the site mimics legitimate cryptocurrency airdrop platforms to deceive users into disclosing wallet credentials or transferring funds under false pretenses. The domain remains operational and continues to pose a high risk to unsuspecting visitors seeking token distributions or promotional giveaways. Infrastructure analysis reveals multiple technical indicators supporting the fraudulent classification. The domain is flagged by 3 of 95 security vendors on VirusTotal, a relatively low but notable detection rate that suggests emerging or evasive malicious activity. It is registered through Cloudflare, Inc., with a creation date of February 21, 2026, which may indicate either a typo-squatted or pre-registered domain intended for abuse. The site resolves to the IP address 188.114.96.3, hosted on autonomous system AS13335 (Cloudflare, Inc.) in the United States. Notably, the domain lacks a valid SSL certificate, a red flag for user security and authenticity. It appears on two independent security blocklists and is actively blocked by at least two threat intelligence platforms, reinforcing its malicious classification. Current monitoring confirms the domain remains active and accessible, serving content under the title 'Moltbook | Airdrop.' The absence of encryption, combined with the use of a content delivery network known for hosting both legitimate and malicious sites, complicates detection and takedown efforts. Users are strongly advised to avoid interacting with this domain. Organizations should update network security policies to block access to claim-moltbook.pages.dev and its associated IP address. Security teams are recommended to monitor for related domains using similar naming patterns or infrastructure, particularly those leveraging Cloudflare Pages or .pages.dev subdomains for brand impersonation. End users should verify airdrop legitimacy through official project channels and never connect wallets to unverified third-party sites.