airdrop[.]capital

This domain, airdrop.capital, is actively engaged in brand impersonation targeting cryptocurrency users through fraudulent airdrop schemes. Analysis indicates the site mimics legitimate airdrop promotions to deceive visitors into connecting wallets or disclosing private keys, likely deploying crypto drainer scripts to siphon funds. The threat specifically exploits the growing trend of token airdrops, where users expect free distributions but instead encounter malicious smart contracts or phishing interfaces designed to compromise assets. Infrastructure analysis reveals multiple high-confidence indicators of fraudulent activity. The domain was registered on May 29, 2026, through Dynadot Inc, a registrar frequently associated with abuse complaints. Security vendors on VirusTotal flagged the domain with 3/95 detections, while it appears on three distinct security blocklists, including MetaMask and PhishDestroy. The domain resolves to an Akamai-hosted IPv6 address (2a02:26f0:b700:287::1771), and Gridinsoft assigns it a trust score of 0/100, further corroborating its malicious classification. The current page title, 'Access Denied,' may indicate attempts to evade automated crawlers while maintaining backend functionality for targeted attacks. Users who have visited airdrop.capital should take immediate remedial actions to mitigate potential compromise. Disconnect any wallets previously linked to the site and revoke permissions for all associated smart contracts using a blockchain explorer. Conduct a full malware scan on devices used to access the domain, as crypto drainers often deploy secondary payloads. Monitor wallet activity for unauthorized transactions and consider migrating assets to a new wallet if suspicious activity is detected. Report the domain to relevant abuse channels and avoid interacting with any communications or promotions referencing this address.