claim-one[.]pages[.]dev

This domain, claim-one.pages.dev, is actively flagged as a high-risk crypto drainer infrastructure impersonating an airdrop campaign. Registered on June 24, 2026, through Cloudflare, the domain resolves to 188.114.96.3 (AS13335, Cloudflare, Inc.) and remains operational as of July 12, 2026. The page title 'One | Airdrop' and scam classification indicate a fraudulent airdrop scheme designed to drain cryptocurrency wallets. Infrastructure analysis reveals Cloudflare-hosted nameservers (hans.ns.cloudflare.com, love.ns.cloudflare.com) and SSL certification via Google Trust Services (WE1), with HSTS and HTTP/3 enabled, suggesting a professionally configured phishing kit. Defenders should note that while no detections were recorded in a 91-vendor scan, the domain is blocked by four security vendors, including MetaMask and ScamSniffer, reinforcing its malicious classification. The absence of detections does not confirm safety, as phishing kits often evade initial scans. The domain appears on four blocklists, and Gridinsoft assigns it a trust score of 0/100. No brand impersonation beyond the generic 'One' airdrop theme is confirmed in available data. Defenders are advised to treat this domain as active threat infrastructure, prioritize blocking at DNS and network levels, and monitor for wallet-draining activity linked to this endpoint. Further analysis of connected wallet addresses or transaction patterns may reveal additional IOCs.