airdrop-soniclabs[.]world

Analysis of the domain airdrop-soniclabs.world indicates active participation in a crypto-drainer phishing campaign as of July 12, 2026. The domain resolves to the IP address 188.114.97.3 and is protected by Cloudflare infrastructure, including HTTP/3 and Cloudflare Browser Insights. Registration was conducted through Web Commerce Communications Limited (WebNic.cc), a registrar frequently associated with high-risk domains. The domain currently holds a trust score of 0/100 and appears on two security blocklists, with 13 of 95 security vendors flagging it in recent scans. Additionally, the domain has been referenced in 23 threat intelligence pulses, suggesting persistent malicious activity. The page title, 'Nur einen Moment…,' does not provide explicit confirmation of the targeted brand or specific attack vector beyond the crypto-drainer classification. However, the domain's infrastructure and detection history align with known patterns of cryptocurrency theft operations. Defenders are advised to treat this domain as high-risk and implement blocking measures at the network and endpoint levels. Further investigation into associated wallet addresses and transaction patterns is recommended to mitigate potential financial losses. The domain remains active, and no takedown actions have been observed as of the report date.