airdropcaldera[.]live

PhishDestroy has identified airdropcaldera.live as a malicious phishing domain that impersonates Revolut, a well-known financial services brand. The site was titled "Caldera Airdrop - Claim Your Tokens," a classic lure designed to trick users into believing they can claim free cryptocurrency or tokens from Caldera, a legitimate blockchain project. In reality, the attackers are attempting to steal login credentials, private keys, or other sensitive information by mimicking a trusted brand. The domain is now offline, but similar threats may emerge.

Our investigation reveals that airdropcaldera.live is flagged by 1 out of 95 security vendors on VirusTotal, indicating that it was recognized as malicious by a security community. The domain was registered through Web Commerce Communications Limited, a registrar sometimes abused by threat actors. The SSL certificate was issued by SSL Corporation and Cloudflare TLS Issuing ECC CA 3, which provides an illusion of security but does not guarantee legitimacy. The domain resolved to IP address 104.21.96.1 before being taken down.

If you visited airdropcaldera.live, you should immediately change your Revolut password and enable two-factor authentication if you haven't already. Also scan your device with reputable antivirus software to check for malware or keyloggers. Avoid entering any personal or financial information on similar airdrop sites, and always verify URLs through official brand channels. PhishDestroy recommends staying vigilant against brand impersonation scams and reporting any suspicious domains to relevant authorities.