power-gacha[.]com

This domain, power-gacha.com, is flagged as a high-risk brand impersonation threat targeting cryptocurrency users through a fraudulent airdrop scheme. Analysis indicates it operates as a fake GACHA token distribution portal, luring victims with promises of free cryptocurrency rewards. The page title explicitly claims legitimacy with the text $GACHA — Official Airdrop Portal, a common tactic to deceive users into connecting wallets or disclosing private keys. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 188.114.96.3 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It was created on June 02, 2024, and is currently flagged by 10 out of 95 security vendors on VirusTotal. The domain appears on five security blocklists and is actively blocked by multiple wallet protection tools, including MetaMask and ScamSniffer. The SSL certificate is issued by Google Trust Services, and the site employs Cloudflare for hosting and security, including HSTS and HTTP/3 protocols. As of the latest assessment, power-gacha.com has been taken offline, reducing immediate exposure. However, residual risk remains due to the domain's recent registration and association with known threat intelligence pulses. Users who interacted with the site should revoke any connected wallet permissions, monitor for unauthorized transactions, and verify the legitimacy of any linked smart contracts. Organizations are advised to update blocklists and monitor for similar domains leveraging the same registrar or hosting infrastructure.