airdropolab[.]live

This domain, airdropolab.live, is assessed as a brand impersonation phishing threat specifically targeting users of cryptocurrency airdrop services. The page title observed was 'o.lab airdrop - Claim Your Tokens', which is designed to deceive visitors into connecting their wallets or providing credentials, likely leading to asset theft via a crypto drainer mechanism. No specific drainer kit name was identified, but the modus operandi aligns with common airdrop scams.

Technical indicators are definitive. VirusTotal analysis shows a detection rate of 4 out of 95 security vendors flagging this domain as malicious. The domain was registered through Web Commerce Communications Limited dba WebNic.cc, a registrar associated with a number of phishing campaigns. The IP address 104.21.72.44 resolves to Cloudflare infrastructure, which provides content delivery and DDoS protection, often abused by threat actors to obscure hosting origins. The domain appears on 1 security blocklist (PhishDestroy) and has a Gridinsoft trust score of 0/100, indicating high risk. No Google Safe Browsing status was provided, but the domain is currently offline.

Current status shows the domain has been taken offline, which mitigates immediate risk to potential victims. Response actions likely include takedown requests to the registrar and hosting provider. However, residual risk remains as the infrastructure (IP, Cloudflare) may be reused for future campaigns. Users should remain vigilant against unsolicited airdrop claims and verify URL authenticity before interacting. No further actionable intelligence is available at this time.