sentientairdrop[.]xyz

sentientairdrop.xyz was registered on February 21 2026 through Ultahost, Inc. The domain resolves to IP 45.12.2.67, which belongs to AS6698 Virtual Systems LLC and is geolocated in Ukraine. Authoritative nameservers ns1.sentientairdrop.xyz and ns2.sentientairdrop.xyz are hosted on the same IP range, indicating a single‑purpose hosting environment. An SSL certificate issued by Let’s Encrypt (R13) was observed, confirming the site offered HTTPS connections before being taken offline. The page title captured during the brief live period reads "Sentient - AI Open Source Initiative | Token Airdrop", and the associated kit is identified as an "Airdrop Scam" targeting cryptocurrency users.

Technology fingerprints include Plesk control panel, Nginx web server, Tailwind CSS front‑end framework, and DTScout detection signatures, all consistent with low‑cost phishing deployments. The domain’s mail exchanger is mail.sentientairdrop.xyz with priority 10, suggesting a functional mail channel that could be used for phishing outreach. Detection data shows that 11 of 93 VirusTotal scanners flagged the domain, and it is listed on one external blocklist. PhishDestroy has already taken the domain offline, and Gridinsoft assigns a trust score of 0/100, indicating a high confidence of malicious intent.

No additional public intelligence (OTX, Safe Browsing, etc.) is currently available. Defenders should treat any traffic to or from 45.12.2.67 as suspicious, block the domain at perimeter devices, and monitor for email messages originating from the listed MX host. Because the site is offline, active content collection is limited, but the observed indicators provide a reliable signature set for future detection of similar airdrop‑driven crypto drainers.