0xprs[.]top

The domain 0xprs.top was registered on February 23, 2026 through NiceNIC International Group Co., Limited and is currently taken offline. DNS resolution points to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The zone uses Cloudflare authoritative nameservers naomi.ns.cloudflare.com and peyton.ns.cloudflare.com, but no SSL certificate is presented, indicating that the site was served over plain HTTP before being disabled.

The page title captured from the site reads "$USDC Token Airdrop", and the underlying malicious kit is identified as an "Airdrop Scam" targeting cryptocurrency users. VirusTotal scans show four of ninety‑three security vendors flagging the domain, and the site is listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. These indicators collectively classify the domain as a crypto‑focused phishing operation with an elevated risk rating.

Defenders should continue to block the domain at network perimeter devices, add the IP address 188.114.97.3 to deny‑list rules where appropriate, and monitor for any resurgence of the host on other domains or subdomains. Because the site is offline, active content cannot be inspected further, so threat intel should be updated if the domain reappears or if additional artefacts (e.g., malicious payload hashes) surface. Continuous correlation with phishing‑specific feeds and Cloudflare‑origin abuse reports is recommended to catch any related campaigns that may reuse the same infrastructure.