airdrop-trololol[.]io

The domain airdrop-trololol.io has been identified as a brand impersonation phishing site, currently offline, impersonating Airdrop Scam.

This domain was flagged by 5 of 95 VirusTotal vendors, indicating a significant threat level, and was registered through NiceNIC International Group Co., Limited, resolving to the IP address 188.114.97.3, created on February 21, 2026, and appears on 2 security blocklists, with an SSL certificate issued by Google Trust Services / WE1, which raises concerns about its legitimacy, as the page title found was Welcome to nginx, a default title often associated with newly created or unconfigured websites.

The current status of airdrop-trololol.io is offline, which may indicate that the phishing campaign has been disrupted, however, users should remain cautious as the domain may be reactivated or similar domains may be created to continue the phishing campaign, with a risk level assessed as elevated, and considering the technical indicators, such as the IP address and blocklist count, it is crucial for users to exercise caution when encountering similar domains, and to never interact with websites that impersonate well-known brands or services, and instead, report them to the relevant authorities.