airdrop-pretzel[.]build

The domain airdrop-pretzel.build, impersonating the brand berachain, has a high threat score of 85/100 and is currently down. Six out of 95 security vendors have flagged this domain as malicious, including notable names such as Fortinet and SOCRadar. It is also listed on five public blocklists, indicating a recognized threat, though it is not flagged by Google Safe Browsing.

Registrar information is not available, suggesting potential use of privacy protection. The domain was created on February 21, 2026, and was first detected on February 26, 2026. The hosting IP is 172.67.168.54, which should be flagged as an indicator of compromise. Block the domain at the perimeter and monitor the associated IP for further malicious activity.