pi-614-airdrop[.]pages[.]dev

This domain is flagged as an active crypto drainer scam targeting users through a fraudulent Pi Network airdrop offer. Analysis indicates the site is hosted on Cloudflare infrastructure (AS13335), resolving to IP 172.66.47.160 with nameservers dave.ns.cloudflare.com and lara.ns.cloudflare.com. The domain was registered on March 14, 2025, and remains operational as of July 12, 2026, returning an HTTP 200 status. Technical indicators include HSTS enforcement, HTTP/3 support, and a Google Trust Services SSL certificate (WE1). The page title explicitly states 'Pi Network Airdrop,' aligning with the reported scam type (crypto scam). While only 2 of 93 security vendors on VirusTotal flag this domain, it appears on at least one security blocklist, and independent detection systems have classified it as malicious. Defenders should treat this domain as high-risk, particularly for cryptocurrency-related fraud. The use of Cloudflare hosting may obscure backend infrastructure, but the domain's association with a known phishing kit (Airdrop Scam) and its persistent activity warrant immediate blocking. No legitimate airdrop would require users to connect wallets to unverified third-party domains. Network-level protections should be implemented to prevent access, and wallet interactions with this domain should be monitored or restricted.