cryptomus-giveaway[.]xyz

This domain is flagged as a generic phishing infrastructure hosting a fake airdrop scam. The domain cryptomus-giveaway.xyz was registered on June 20, 2026 through NameSilo, LLC and uses the DNS service dnspod.com with nameservers a.dnspod.com, b.dnspod.com and c.dnspod.com. DNS resolution points to the IPv4 address 193.187.110.3, which remains active as of the report date. The intelligence indicates the campaign is currently operational and classified under the generic_phishing threat type with a specific fake‑airdrop lure. No additional technical artefacts, such as payload hashes or malicious URLs, have been disclosed, and the site has not been publicly scanned by external services. Consequently, the full scope of the malicious activity, including any credential harvesting forms or secondary command‑and‑control endpoints, remains unknown. Defenders should add cryptomus-giveaway.xyz and the associated IP 193.187.110.3 to block lists, enforce outbound filtering for connections to this address, and monitor DNS logs for queries to the dnspod.com nameservers. Continuous threat‑intel feeds should be consulted for any updates, and any observed traffic to the domain should be captured for deeper forensic analysis.