airdrop[.]abhilov[.]me

The domain airdrop.abhilov.me is a phishing site engaged in brand impersonation targeting the Solana cryptocurrency ecosystem. It presents itself as a legitimate Solana airdrop or wallet connection portal but is designed to deceive users into exposing wallet credentials or approving malicious transactions. No drainer kit was identified, though the site operates as a wallet-connect phishing scam. As of the latest verification, airdrop.abhilov.me has been taken offline.

Technical indicators confirm the elevated risk. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. It appears on 1 security blocklist (PhishDestroy) but is not flagged by Google Safe Browsing. Registered through NameCheap, Inc. on January 16, 2025, the domain resolves to the IP address 66.33.60.129, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. No SSL certificate is present, and the observed page title is 'Vite + React + TS'. Detected technologies include Nginx and OpenResty.

Users who interacted with airdrop.abhilov.me should immediately revoke any token approvals granted to unknown contracts using a tool like Revoke.cash or Etherscan. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Change passwords for any accounts where credentials may have been exposed, enable two-factor authentication, and report the domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. If financial loss occurred, file a report with local law enforcement or cybercrime units.