mitosisairdrop[.]live

The domain mitosisairdrop.live was registered on February 21, 2026 and is currently listed as offline. DNS resolution points to the address 172.67.204.236, which is owned by Cloudflare, Inc. (AS13335) and geolocated in the United States. The site presents a 404 Not Found HTTP response, and the SSL certificate presented is identified as WE1. Analysis from the PhishDestroy blocklist indicates that the domain has been actively blocked, and it appears on one additional security blocklist.

Reputation scoring from Gridinsoft assigns the domain a trust score of 0 out of 100, reflecting a highly malicious assessment. VirusTotal scans show that two of ninety‑three security vendors flagged the domain, confirming that at least a subset of scanners consider it malicious. The domain is categorized under a crypto scam, specifically a crypto drainer, suggesting attempts to illicitly divert cryptocurrency assets. While the exact phishing kit or victim‑targeted brand is not disclosed, the observable infrastructure—Cloudflare hosting, low trust score, blocklist presence, and limited vendor detections—provides sufficient evidence for remediation.

Defenders should add mitosisairdrop.live to URL filtering rules, enforce DNS sinkholing or sinkhole redirects for the associated IP, and ensure that endpoint protection solutions are updated to reflect the two vendor detections. Continuous monitoring of the IP address and any future DNS changes is advised, as threat actors may repurpose the Cloudflare edge for new campaigns. Organizations should also consider sharing the indicator with threat intelligence platforms to improve collective detection and response capabilities.