airdrop-bedrock[.]live

This domain airdrop-bedrock.live poses a specific brand impersonation threat targeting Revolut, a financial services company. The page title 'Bedrock Airdrop - Uncover the Future of Cryptocurrency' is designed to lure victims into a fake cryptocurrency airdrop scheme. The domain impersonates Revolut's brand to steal credentials or cryptocurrency assets, functioning as a crypto drainer or credential theft page. Analysis indicates this domain is part of a coordinated phishing campaign, evidenced by its registration through Web Commerce Communications Limited and use of Cloudflare for anonymity.

Evidence from analysis: VirusTotal shows 0/95 detections, meaning the domain has not yet been flagged by security vendors. The domain resolves to IP 104.21.16.1, registered with Web Commerce Communications Limited, and appears on 1 security blocklist. The SSL certificate is issued by Google Trust Services, and technologies include Cloudflare Browser Insights and HTTP/3. The Gridinsoft trust score is 0/100, indicating high risk. The domain status is offline and blocked by PhishDestroy. Infrastructure analysis reveals the domain uses Cloudflare for content delivery and DDoS protection, which is common in phishing infrastructure.

If users visited this domain, they should immediately change any passwords or credentials entered on the site. They should monitor their Revolut accounts and cryptocurrency wallets for unauthorized transactions. For cryptocurrency wallets, users should revoke any permissions granted to the domain. Users should also run a full malware scan on their devices, as visiting such domains can lead to malware infections. Report the domain to relevant authorities and financial institutions.