# airdrop-velora.live — SUSPICIOUS

> airdop-velora.live is a flagged crypto drainer domain now offline. Learn why it’s risky and how to stay protected from scams like this.

## Summary
PhishDestroy identifies airdrop-velora.live as a low-risk crypto drainer domain designed to steal cryptocurrency wallet credentials. Although this threat level is currently low, such domains pose a significant risk by tricking users into revealing sensitive information, potentially leading to financial loss.

airdrop-velora.live was registered on February 21, 2026, through Web Commerce Communications Limited and resolves to IP address 104.21.48.1. The domain is currently offline and appears on three security blocklists. VirusTotal analysis shows that 2 out of 95 security vendors flag this domain, indicating some detection but not widespread consensus.

Users are advised to avoid visiting this domain and be cautious with any unsolicited crypto airdrop offers. Always verify domain legitimacy before engaging in crypto transactions or entering wallet credentials. Using reputable security tools and staying informed about emerging threats like airdrop-velora.live helps safeguard digital assets.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Scam type: Airdrop Scam
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Web Commerce Communications Limited
- Country: MY
- IP: 104.21.48.1
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["marjory.ns.cloudflare.com", "felipe.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["alphaMountain.ai", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0199534e-81d2-70cd-8dbe-d2b43f21ae08.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/6ba2b23d-a566-41f9-aa2d-1e3398a3b51a
- PhishDestroy: https://phishdestroy.io/domain/airdrop-velora.live/
- LLM endpoint: https://phishdestroy.io/domain/airdrop-velora.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdrop-velora.live/
Last updated: 2026-03-19