airdrop-prlvasea[.]icu

The domain airdrop-prlvasea.icu has been identified as an elevated brand impersonation threat, specifically attempting to mimic an Airdrop Scam campaign. Its fraudulent intent is indicated by a fake interface and deceptive branding to trick users seeking legitimate airdrop opportunities, increasing the likelihood of credential theft or unauthorized transactions.

Technical examination confirms several threat indicators: airdrop-prlvasea.icu was created on May 14, 2025 and registered via PDR Ltd. d/b/a PublicDomainRegistry.com. The domain points to IP address 104.21.88.5. Notably, 3 out of 95 security vendors on VirusTotal have flagged it for malicious activity. It is listed on 1 security blocklist and has a trust score of 0/100, further corroborating risk. The site was blocked by PhishDestroy and, as of now, is offline. The page title observed was 'Um momento…' which deviates from legitimate brand language and is indicative of obfuscation tactics.

Users who interacted with airdrop-prlvasea.icu should immediately change any credentials entered on the site, monitor their associated accounts for unauthorized activities, and perform a thorough malware scan on their devices. Network teams are advised to blacklist the domain and associated IP address. Security monitoring should be heightened for similar naming patterns and infrastructure. If sensitive data was entered or browser warnings disregarded, consider further incident response measures and inform affected parties.