claimmaskairdrop[.]com

The domain claimmaskairdrop.com was registered on February 21, 2026 and is presently taken offline. Intelligence from AlienVault OTX records the domain in two separate threat pulses, indicating that it has been linked to prior malicious campaigns. Reputation services uniformly rate the site as highly untrustworthy: Gridinsoft assigns a score of 0 out of 100, while Scamadviser reports a trust score of 1 out of 100. The domain appears on three public blocklists and is actively blocked by the PhishDestroy, ScamSniffer, and Enkrypt filtering services.

VirusTotal analysis shows that 14 out of 93 scanned security vendors flagged the domain as malicious, reinforcing the suspicion of malicious intent. The listed scam type is a crypto scam, specifically a crypto drainer, suggesting the infrastructure was likely used to lure victims into transferring cryptocurrency to attacker-controlled wallets. No additional technical artifacts such as IP address, ASN, hosting provider, SSL certificate details, or HTTP response codes are available in the current dataset, leaving the underlying infrastructure opaque.

Defenders should incorporate claimmaskairdrop.com into domain denial lists, enforce outbound filtering to prevent connections to the domain, and monitor for any resurgence of the domain or closely related look‑alike registrations. Continuous correlation with OTX pulse updates and blocklist feeds is recommended to capture any re‑activation attempts. Given the low trust scores, multiple vendor detections, and explicit classification as a crypto drainer, the domain presents a high‑risk profile and warrants immediate remediation across enterprise security controls.