airdrop-derive[.]live
“Derive Airdrop - Claim Your Tokens”
Riepilogo delle prove
This domain is flagged as a brand impersonation threat targeting users through a fraudulent airdrop scheme. Analysis indicates the site operated under the pretense of distributing free tokens, a common tactic to harvest credentials, private keys, or install malicious software on victims' devices. The specific threat type is a cryptocurrency airdrop scam, designed to exploit trust in blockchain projects and deceive users into disclosing sensitive information or transferring funds. Infrastructure analysis reveals the domain resolved to IP address 104.21.15.196 and was registered through Web Commerce Communications Limited. The site was served via Cloudflare, utilizing HTTP/3 and Cloudflare Browser Insights for performance monitoring. It displayed a page title of 'Derive Airdrop - Claim Your Tokens' and held an SSL certificate issued by Google Trust Services. Detection metrics show 0/95 detections on VirusTotal, a Gridinsoft trust score of 0/100, and presence on one security blocklist. The domain has since been taken offline, though prior activity remains under investigation. Mitigation steps for this threat type include verifying airdrop legitimacy through official project channels before interacting with any claims page. Users should cross-reference domain registration details, IP history, and SSL certificates with known legitimate sources. If credentials or private keys were entered on this site, immediate revocation and replacement are advised. Network-level protections should block the IP 104.21.15.196 and monitor for related domains registered through the same registrar. Security teams should treat any domain with similar naming patterns (e.g., 'airdrop-[brand]') as high-risk until proven otherwise.
Data Coverage
Indicatori di sicurezza
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 11/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
VirusTotal
1 → 0
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of airdrop-derive.live · checked Jun 27, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo