airdrop-cate[.]com

Analysis of airdrop-cate.com shows an active crypto‑drainer infrastructure that was registered on August 04, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IPv4 address 188.114.97.3 and uses Cloudflare nameservers indie.ns.cloudflare.com and lloyd.ns.cloudflare.com, indicating reliance on a widely used CDN for concealment and resilience. VirusTotal records reveal that the domain has been inspected by 91 security vendors; at the time of review no vendor has raised a detection, yet the absence of alerts does not constitute a safety assurance.

Independent threat‑intelligence feeds list the domain on three security blocklists, and it is actively blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple protective platforms have identified malicious behavior associated with the host. The classification as a crypto drainer is supported by the threat type label supplied in the intelligence, suggesting that the site is likely to solicit cryptocurrency transactions from unsuspecting users. Current evidence does not include HTTP response codes, SSL certificate details, page titles, or additional content analysis, leaving the exact phishing workflow and payload undisclosed.

Defenders should add airdrop-cate.com to network‑level deny lists, enforce DNS filtering that includes the known blocklists, and monitor outbound connections to 188.114.97.3 for anomalous cryptocurrency‑related traffic. Endpoint protection should be configured to flag any attempts to interact with browser extensions such as MetaMask when the domain is accessed. Continuous re‑evaluation is advised, as the lack of vendor detections may change if new samples emerge or if the site’s content evolves.