airdrop-boundless[.]network
Analysis of airdrop-boundless.network indicates that the domain was created on September 08, 2025 and is presently taken offline. Registration records show the domain was acquired through Devexpanse Ltd operating as Regery.com. DNS resolution points to IP address 188.114.97.3, which is hosted within AS13335, a Cloudflare, Inc. network located in the United States. The domain utilizes Cloudflare name servers alice.ns.cloudflare.com and leonard.ns.cloudflare.com, and does not present an SSL/TLS certificate, leaving communications unencrypted.
Reputation scoring from Gridinsoft assigns a trust score of zero out of one hundred, reflecting a highly malicious posture. VirusTotal scanning reports that two out of ninety-five security vendors flagged the domain as malicious, reinforcing the suspicion of abusive activity. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. The listed scam type is a crypto scam, specifically a crypto drainer, which suggests attempts to hijack cryptocurrency assets.
While the exact content served by the site has not been captured, the convergence of a recent creation date, low trust score, minimal vendor detections, and blocklist presence supports classification as a crypto drainer operation. Defenders should continue to block the domain at perimeter devices, update detection rules to include the observed IP address and name server pair, and monitor for any resurgence of activity should the domain be reactivated. Additional investigation of any payloads or URLs previously associated with the domain is advisable to fully map the threat actor's infrastructure.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive