airdropnest[.]site

The domain airdropnest.site is a confirmed phishing site engaged in brand impersonation targeting Binance users. It presents itself as a cryptocurrency airdrop platform to deceive victims into disclosing login credentials or sensitive wallet information, though no drainer kit was identified. As of the latest verification, airdropnest.site has been taken offline, but prior activity classified it as an elevated-risk scam.

Technical indicators confirm the malicious nature of airdropnest.site. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Gridinsoft, which assigned a trust score of 0/100. It appears on 4 security blocklists, specifically PhishDestroy, Polkadot, Enkrypt, and Codeesura. Registered through NameCheap, Inc. on August 19, 2025, the domain resolved to IP address 172.67.148.15, hosted by Cloudflare in the US (AS13335). The SSL certificate was issued by WE1, and the observed page title was 'Dropnest'. Google Safe Browsing did not flag the domain at the time of assessment.

Individuals who interacted with airdropnest.site should immediately change any exposed Binance credentials and enable two-factor authentication. Monitor accounts for unauthorized transactions or login attempts and report suspicious activity to Binance support. Victims are advised to report the phishing domain to their local cybercrime unit or platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.