linea[.]airdrpsalerts[.]cfd

The domain linea.airdrpsalerts.cfd has been identified as a brand impersonation threat targeting Linea, a blockchain platform. This domain is currently offline, but during its active period it posed as an official Linea airdrop alert site to trick users into connecting their wallets or revealing sensitive information. The page title observed was 'Google', a common tactic to appear innocuous in search results or browser tabs.

Technical analysis reveals that the domain resolves to IP address 142.251.140.164 and was registered through Dynadot LLC on October 29, 2025. It appears on one security blocklist and is flagged by 2 out of 95 VirusTotal security vendors as malicious. No SSL certificate was detected, indicating a lack of secure connection. These indicators collectively point to a high-risk phishing operation designed to steal cryptocurrency assets.

As the domain has been taken offline, immediate risk is reduced, but users should remain vigilant against similar domains. PhishDestroy recommends verifying any airdrop or token-related communications through official Linea channels and never connecting wallets to unsolicited sites. Always double-check URLs and use security tools to scan suspicious domains before interacting.