claim[.]buildonhybrid[.]top

The domain claim.buildonhybrid.top was registered on February 21, 2026 and is currently taken offline. Infrastructure analysis shows it resolves to the IPv6 address 2a06:98c1:3120::3, which belongs to AS13335 operated by Cloudflare, Inc., and is geolocated in the United States. The site presented a page titled "Hybrid Airdrop" and employed an SSL certificate identified as WE1, indicating the use of a standard TLS certificate without additional validation. Threat intelligence flags the domain as a brand impersonation targeting Binance, employing an "Airdrop Scam" phishing kit.

VirusTotal reports two detections out of ninety-three scanning vendors, confirming that at least a minority of security engines recognize malicious activity. The domain appears on two external blocklists, specifically PhishDestroy and ScamSniffer, reinforcing its classification as a crypto‑related scam. Gridinsoft assigned a trust score of zero out of one hundred, reflecting an extremely low confidence in the domain’s legitimacy.

The elevated risk rating aligns with the observed indicators, including the use of a known phishing kit, low trust score, and presence on multiple blocklists. Defenders should ensure that the domain is blocked at network perimeter devices, incorporate the IPv6 address and associated ASN into threat‑intel feeds, and monitor for any re‑registration attempts or similar domains that reuse the "Hybrid Airdrop" branding. Continuous vigilance is advised, especially for users handling Binance credentials or participating in cryptocurrency airdrops, to mitigate potential credential harvesting or asset loss.