sol-airdrop[.]pages[.]dev

The domain sol-airdrop.pages.dev is currently active and has been identified as a brand‑impersonation site targeting the Airdrop Scam brand. Infrastructure analysis shows the domain resolves to the IP address 188.114.97.3 and was first registered on December 07, 2025 via Cloudflare Pages. Threat intelligence indicates the domain is being used for a fake airdrop scheme, as reflected in the supplied scam type designation.

Detection activity is notable: eleven of ninety‑one security vendors on VirusTotal have flagged the domain as malicious, and it appears on four external blocklists – PhishDestroy, MetaMask, ScamSniffer, and SEAL – confirming that multiple protective services have taken it down. The domain’s registration through Cloudflare Pages suggests it benefits from the provider’s CDN and edge‑hosting capabilities, which can obscure the true origin of the malicious payload. No public SSL certificate details, HTTP response codes, or page‑title information are available in the current intelligence set, and no Safe Browsing or OTX entries have been reported.

Defenders should prioritize adding sol‑airdrop.pages.dev to DNS blocklists and firewall deny lists, monitor traffic to the associated IP 188.114.97.3 for anomalous connections, and ensure endpoint protection solutions are updated to reflect the eleven vendor detections. Continuous re‑evaluation is advised, as additional indicators such as page content or certificate data may emerge that could refine mitigation actions.