live-shuffle[.]com

The domain live-shuffle.com has been identified as a high-risk entity involved in brand impersonation, specifically targeting users through an Airdrop scam. Registered on March 13, 2026, the domain is currently active and resolves to the IP address 188.114.96.3. The website utilizes a combination of technologies, including Node.js, Vue.js, Nuxt.js, and is served via Cloudflare, which also supports HTTP/3. An SSL certificate from Let's Encrypt is present, which is commonly used for legitimate purposes but can also be leveraged by malicious actors for fraudulent domains. The page has the title 'Shuffle | Airdrop', which aligns with its impersonation efforts.

Threat intelligence indicates that this domain has been flagged by 13 out of 95 security vendors on VirusTotal, highlighting its malicious nature. Furthermore, it has been found in 24 threat intelligence pulses on AlienVault OTX, reinforcing its reputation as a threat. The domain has been blocked by several security solutions, including PhishDestroy and BLP-Malware, and it appears on two security blocklists. Notably, the Gridinsoft trust score for this domain is alarming at 0 out of 100, indicating a complete lack of trustworthiness.

Defenders should remain vigilant and consider implementing network-level protections to block access to live-shuffle.com. User education is also critical in preventing individuals from falling victim to related scams. Monitoring for any phishing attempts or communications originating from this domain or related infrastructures should be prioritized, especially in environments where Airdrop services are frequently utilized. Given the ongoing status of this domain, it is recommended to regularly review and update security measures to mitigate the risks posed by such malicious activities.