airdrop-derive[.]live
“Derive Airdrop - Claim Your Tokens”
Résumé des preuves
This domain is flagged as a brand impersonation threat targeting users through a fraudulent airdrop scheme. Analysis indicates the site operated under the pretense of distributing free tokens, a common tactic to harvest credentials, private keys, or install malicious software on victims' devices. The specific threat type is a cryptocurrency airdrop scam, designed to exploit trust in blockchain projects and deceive users into disclosing sensitive information or transferring funds. Infrastructure analysis reveals the domain resolved to IP address 104.21.15.196 and was registered through Web Commerce Communications Limited. The site was served via Cloudflare, utilizing HTTP/3 and Cloudflare Browser Insights for performance monitoring. It displayed a page title of 'Derive Airdrop - Claim Your Tokens' and held an SSL certificate issued by Google Trust Services. Detection metrics show 0/95 detections on VirusTotal, a Gridinsoft trust score of 0/100, and presence on one security blocklist. The domain has since been taken offline, though prior activity remains under investigation. Mitigation steps for this threat type include verifying airdrop legitimacy through official project channels before interacting with any claims page. Users should cross-reference domain registration details, IP history, and SSL certificates with known legitimate sources. If credentials or private keys were entered on this site, immediate revocation and replacement are advised. Network-level protections should block the IP 104.21.15.196 and monitor for related domains registered through the same registrar. Security teams should treat any domain with similar naming patterns (e.g., 'airdrop-[brand]') as high-risk until proven otherwise.
Data Coverage
Signaux de sécurité
Renseignements sur la sécurité réseau
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
VirusTotal
1 → 0
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of airdrop-derive.live · checked Jun 27, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif