monkeyairdrop[.]online
“Monkey Airdrop”
Résumé des preuves
Analysis of the domain monkeyairdrop.online indicates it is actively involved in a crypto drainer phishing campaign targeting users through a fake airdrop scheme. The domain was registered on February 21, 2026, via NameCheap, Inc., and currently resolves to the IP address 216.198.79.65, hosted on Amazon.com, Inc. infrastructure (AS16509) located in the United States. The domain's nameservers are dns1.registrar-servers.com and dns2.registrar-servers.com, consistent with registrar-provided DNS services. A 307 HTTP status code suggests a temporary redirect, potentially part of the phishing workflow. The page title, 'Monkey Airdrop,' aligns with the identified scam type of a fake airdrop, a common tactic used to deceive users into connecting wallets to malicious smart contracts. The domain has been flagged by at least one security blocklist, and its Gridinsoft trust score is 0/100, reflecting high-risk classification. Technologies detected on the domain include Vercel and HSTS, which may be leveraged to enhance the appearance of legitimacy or enforce secure connections as part of the deception. While only one of ninety-three security vendors on VirusTotal has flagged the domain, this does not conclusively indicate safety, as detection coverage may lag behind emerging threats. The SSL certificate is issued by R10, a low-assurance certificate authority often used in transient or low-cost hosting environments. MX records point to eforward3.registrar-servers.com, which may facilitate email-based components of the campaign, though no evidence currently confirms active abuse of these records. Defenders should treat this domain as high-risk infrastructure. Network-level blocking of the IP 216.198.79.65 and domain-level filtering of monkeyairdrop.online are recommended. Monitoring for associated domains registered through the same registrar or resolving to the same IP may help identify related campaign infrastructure.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 11/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
-
Cloudflare Radar
Analyse Cloudflare Radar enregistrée · Ouvrir l’analyse
-
État du domaine
Accessible → Inaccessible
-
État du domaine
Inaccessible → Accessible
-
État du domaine
Accessible → Inaccessible
-
État du domaine
Inaccessible → Accessible
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
2 technologies identifiées avec une forte confiance
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of monkeyairdrop.online · checked Mar 2, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif