# airdrop.pending.live — SUSPICIOUS

> Stay safe from scams by avoiding airdrop.pending.live. This site mimics Airdrop services and is under investigation. Do not share personal info.

## Summary
PhishDestroy identifies the domain airdrop.pending.live as a potential brand impersonation threat targeting users through an Airdrop scam. Classified under brand_impersonation, this domain attempts to deceive victims by mimicking legitimate Airdrop-related services. The threat remains under investigation due to limited detection signals but is currently active and warrants caution.

Technically, airdrop.pending.live resolves to the IP address 88.222.222.42, which does not yet appear in major blocklists or security vendor databases. VirusTotal analysis shows zero detections, indicating no immediate malware or phishing signatures flagged by known vendors. Despite the clean vendor report, the domain's registration pattern, ambiguous TLD usage with “.live,” and its contextual targeting of Airdrop users raise suspicion. The domain was seeded with unique identifier f02e17, helping correlate related threat intelligence.

The status of airdrop.pending.live remains active and under careful monitoring. PhishDestroy recommends users avoid interacting with the domain, especially refraining from providing any personal or financial information. Continued surveillance and threat intelligence gathering are advised to detect any escalation or changes in behavior. Users are encouraged to rely on trusted official channels for Airdrop activities and report any suspicious encounters with this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 403)

## Domain Intelligence
- Registrar: HOSTINGER operations, UAB
- IP: 88.222.222.42
- Nameservers: ["ns1.dns-parking.com", "ns2.dns-parking.com"]

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/1t9yKsxD/bda9563ee02a.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/c9c19818-e324-4cce-a625-8547dd9650a5
- PhishDestroy: https://phishdestroy.io/domain/airdrop.pending.live/
- LLM endpoint: https://phishdestroy.io/domain/airdrop.pending.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdrop.pending.live/
Last updated: 2026-03-19