airdrop-8ln[.]pages[.]dev

The domain airdrop-8ln.pages.dev is identified as a high-risk brand impersonation scam. This domain impersonates an airdrop scheme, likely aiming to deceive users into disclosing sensitive information or performing actions that could lead to financial loss. The site is designed to mimic legitimate airdrop services, making it particularly dangerous for users who are expecting such services.

Analysis indicates that the domain was created on March 27, 2026, and is hosted with Cloudflare Pages, resolving to the IP address 188.114.97.3. It is currently active and has been flagged by 5 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services / WE1. Additionally, the domain appears on 5 security blocklists, suggesting it has been involved in malicious activities. These technical indicators, combined with the domain's recent creation and active status, point to a targeted and ongoing threat.

If users have visited airdrop-8ln.pages.dev, they are advised to immediately change any passwords that may have been entered on the site and monitor their financial accounts for any unauthorized transactions. They should also report the incident to their security team or service provider. To avoid similar threats in the future, users should verify the legitimacy of airdrop or brand-related sites through official channels and use multi-factor authentication where available.