live-bitcoinos[.]space

Analysis of live-bitcoinos.space confirms active phishing infrastructure targeting Discord users through a fraudulent airdrop scheme. The domain, registered on October 29, 2025, via NameCheap, Inc., resolves to IP address 68.65.123.197 and presents a page titled '$BOS Airdrop,' directly referencing the scam type identified as an 'Airdrop Scam.' Infrastructure evidence includes a Sectigo Limited SSL certificate, which, while commonly used by legitimate sites, does not mitigate the domain's malicious intent given its presence on six security blocklists and detection in 24 threat intelligence pulses. Four security vendors flagged the domain in scans, though the absence of broader vendor confirmation does not reduce its risk level. The domain remains active as of July 12, 2026, and is blocked by multiple security providers, including Polkadot, ScamSniffer, and PhishDestroy. Defenders should treat this domain as high-risk, prioritize blocking at the DNS and network level, and monitor for related infrastructure, particularly domains resolving to the same IP or using similar naming patterns. The exact content of the phishing page has not been analyzed, but the combination of brand impersonation, airdrop scam classification, and widespread blocklisting provides sufficient evidence for immediate action.