claimsolairdrop[.]pages[.]dev

Analysis indicates that claimsolairdrop.pages.dev is a confirmed fake crypto airdrop domain, currently offline but previously flagged for malicious activity. The domain was registered on February 21, 2026, through Cloudflare, Inc., and resolved to IP 172.66.47.113, hosted on Cloudflare's network (AS13335). Infrastructure analysis reveals Cloudflare nameservers (trace.ns.cloudflare.com, nelly.ns.cloudflare.com) and a Google Trust Services SSL certificate (WE1), typical of phishing domains leveraging Cloudflare's proxy services to obscure origin servers. The domain returned an HTTP 403 status with the page title 'Suspected phishing site | Cloudflare,' confirming Cloudflare's intervention to block access.

Gridinsoft assigned a trust score of 0/100, and the domain appears on at least one security blocklist, with PhishDestroy explicitly blocking it. While VirusTotal shows only one security vendor flagging the domain, this does not diminish the risk, as detection coverage for newly registered phishing domains is often limited. The scam type is classified as a fake airdrop, a common tactic to lure cryptocurrency users into connecting wallets to drainer scripts. Defenders should treat this domain as high-risk, particularly in environments where crypto-related activity occurs.

Although the domain is currently offline, historical DNS records and SSL certificates should be monitored for reactivation attempts. No evidence links this domain to a specific blockchain project or brand, but the airdrop theme aligns with known crypto drainer campaigns. Organizations are advised to block the domain and IP at the perimeter, and users should be cautioned against interacting with similar airdrop-themed URLs.