airdrop-boundless[.]digital

Analysis of the domain airdrop-boundless.digital confirms its classification as an active crypto drainer phishing site, targeting users through fraudulent airdrop schemes. The domain was registered via Web Commerce Communications Limited (WebNic.cc) and is currently resolving to the IP address 104.21.11.21, which is associated with Cloudflare, Inc. (AS13335) and located in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (paityn.ns.cloudflare.com and jimmy.ns.cloudflare.com), alongside Cloudflare Browser Insights and HTTP/3, indicating a reliance on Cloudflare’s protective and performance services to obscure backend infrastructure. Detection data from security vendors is limited but indicative of malicious intent: four of ninety-five vendors on VirusTotal have flagged the domain as malicious. The domain appears on one security blocklist and is actively blocked by PhishDestroy.

Trust scores from Scamadviser and Gridinsoft both stand at 1/100 and 0/100, respectively, reinforcing its high-risk classification. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious domains leveraging Cloudflare. The HTTP status code returned is 403 (Forbidden), and the page title displayed is 'Just a moment...', a default response often associated with Cloudflare’s anti-bot or challenge mechanisms. This may indicate the site is actively filtering traffic, likely to evade automated detection or analysis. The scam type is explicitly identified as a crypto scam, with the phishing kit categorized as an 'Airdrop Scam', suggesting the domain is designed to deceive users into connecting wallets to drain cryptocurrency under the guise of a legitimate airdrop.

Defenders should treat this domain as highly malicious and prioritize blocking it at the network level.