starknet[.]airdrpalerts[.]cfd

PhishDestroy has identified starknet.airdrpalerts.cfd as a confirmed phishing domain engaged in brand impersonation targeting Starknet. This site was designed to deceive users by mimicking legitimate Starknet airdrop alerts, likely to harvest sensitive information such as private keys or login credentials. Analysis indicates that the domain employs no drainer kit, instead relying on social engineering to trick victims into interacting with fraudulent content.

Technical indicators paint a clear picture of this domain's malicious intent. VirusTotal analysis reveals that 12 out of 95 security vendors flag this domain as malicious. The domain is registered through Dynadot LLC and resolves to IP address 216.58.206.68. It was created on October 25, 2025, and notably lacks an SSL certificate, a red flag for any site requesting sensitive data. Furthermore, it appears on one security blocklist, and Google Safe Browsing has not flagged it, but its current status is offline. The page title displayed is 'Google,' a common tactic to evade automated detection.

As of the latest check, starknet.airdrpalerts.cfd has been taken offline, mitigating immediate risk. However, users should remain vigilant as similar domains may resurface. PhishDestroy advises Starknet users to only interact with official sources and to never enter private keys or seed phrases on any third-party websites. If you have already visited this domain, change your credentials and monitor your accounts for unauthorized activity. The threat level is elevated, and continued caution is recommended.