piairdrop[.]pages[.]dev

The domain piairdrop.pages.dev is identified as a high-risk brand impersonation threat targeting Google. The site claims to offer cryptocurrency claims, potentially luring users into providing sensitive information. There is no evidence of a specific drainer kit associated with this domain, but its intent is clear in mimicking a reputable brand to deceive users.

Technical indicators for piairdrop.pages.dev reveal a VirusTotal detection score of 2 out of 95 security vendors, indicating low but notable awareness of its malicious nature. The domain was registered through Cloudflare, Inc. and currently resolves to the IP address 172.66.47.78, which is hosted in the US under AS13335, Cloudflare, Inc. It was created on March 10, 2025, and is reported on one security blocklist, specifically blocked by PhishDestroy. The Google Safe Browsing (GSB) status is not mentioned, but the existing blocklist presence indicates a recognition of its malicious intent.

Currently, piairdrop.pages.dev remains active, and users are advised to exercise caution. The domain's registration through a reputable service like Cloudflare does not mitigate its malicious nature. Given the ongoing risk of brand impersonation, immediate response actions should include monitoring for further exploits related to this domain and ensuring that users are educated about the potential dangers of interacting with such fraudulent sites. The risk level is classified as high, necessitating vigilant scrutiny and reporting of any related phishing attempts.