airdrop-375ai[.]live

This domain, airdrop-375ai.live, is flagged as a brand impersonation threat specifically targeting the Revolut brand. The page title, '375ai Airdrop - Discover the Future of Cryptocurrency', indicates a cryptocurrency airdrop lure designed to harvest credentials or sensitive information from users expecting a legitimate Revolut-related service. No specific drainer kit has been identified in the available intelligence, but the phishing intent is confirmed by the impersonation of a well-known financial brand.

Technical indicators provide a clear picture of the domain's malicious profile. VirusTotal shows 0 detections out of 95 engines, meaning it has not been flagged by antivirus vendors yet. The domain resolves to IP address 172.67.223.40, which is associated with Cloudflare's content delivery network. It was registered through Web Commerce Communications Limited and uses an SSL certificate from Google Trust Services. The domain appears on exactly one security blocklist and has a Gridinsoft trust score of 0 out of 100, indicating high risk. Additional technologies detected include HTTP/3, and the domain is currently offline.

Current status indicates the domain has been taken offline and is blocked by PhishDestroy, a security blocklist. Response actions have effectively neutralized the immediate threat by removing the domain's accessibility. However, residual risk remains as the domain could be reactivated or similar domains may appear under different registrars or IPs. Users who may have interacted with the site before takedown should monitor for suspicious activity and avoid entering credentials on unknown cryptocurrency airdrop pages.