airdrop[.]fighting[.]foundation

The domain airdrop.fighting.foundation was identified as a brand impersonation threat specifically targeting the financial technology company Revolut. The threat level was assessed as elevated due to the potential for significant user deception and misuse of brand identity. The domain's page title, 'Fight.ID-A Airdrop,' suggests the use of a fraudulent airdrop mechanism, often employed in phishing campaigns to lure users into providing sensitive information or credentials.

Technical analysis of the domain reveals several critical indicators. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on February 21, 2026. VirusTotal has identified this domain with a low detection score of 2 out of 95 security vendors, indicating minimal initial recognition by automated security systems. The domain resolves to the IP address 188.114.96.3. It is currently listed on two security blocklists and is blocked by notable services such as ScamSniffer and PhishDestroy. The domain's status with Google's Safe Browsing (GSB) is not explicitly mentioned in the available data.

As of the current status, the domain airdrop.fighting.foundation has been taken offline, which mitigates the immediate threat of user exposure. The inclusion in multiple blocklists and the actions taken by security entities indicate a coordinated response to neutralize this threat. However, the low detection rate on VirusTotal suggests that similar threats may bypass initial security measures. Continuous monitoring of related domains and IP addresses is recommended to prevent potential future incidents. Users are advised to remain vigilant and verify the authenticity of websites, especially those claiming affiliation with financial institutions or offering airdrops.