airdrop-orbiter[.]xyz

Airdrop-orbiter.xyz is an active domain associated with an airdrop scam. This domain is flagged by 2 out of 91 vendors on VirusTotal, indicating a moderate level of detection. It is also listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL, which highlights its malicious nature. The domain is registered with GMO Internet, Inc. and is hosted on an Amazon IP address in the United States.

The domain impersonates a legitimate airdrop operation, aiming to deceive users into participating in fraudulent activities. The SSL certificate is issued by GoDaddy.com, which might lend a false sense of security to unsuspecting victims. The platform risk score for this domain is notably high at 88 out of 100, suggesting a significant threat level.

Despite its recent creation on June 17, 2026, airdrop-orbiter.xyz has already been detected by PhishDestroy as of June 19, 2026. This quick detection underscores the efficiency of PhishDestroy's threat intelligence pipeline, which captures threats during the critical window before they are widely recognized by antivirus vendors. The domain's abuse score is relatively low at 23 out of 100, possibly due to its short lifespan and recent emergence in the threat landscape.