goated[.]airdropsalert[.]life

Analysis of the domain goated.airdropsalert.life indicates it is associated with a high-risk crypto drainer scam, as classified by multiple security vendors. The domain was registered on October 17, 2025, through Dynadot LLC and is currently offline. Infrastructure analysis reveals it resolved to the IP address 199.59.243.228, hosted on Amazon.com, Inc. (AS16509) in the United States. No SSL certificate was detected, increasing the risk of unencrypted data transmission.

Security vendors have flagged this domain with varying levels of detection. Google Safe Browsing explicitly labels it as social engineering, while Gridinsoft assigns a trust score of 0/100. The domain appears on at least one security blocklist, and 16 of 95 vendors on VirusTotal identify it as malicious. The page title, 'airdropsalert.life,' aligns with the reported phishing kit classification of 'Airdrop Scam,' suggesting a focus on fraudulent cryptocurrency giveaways or wallet-draining schemes.

Defenders should treat this domain as confirmed malicious and prioritize blocking it at the network and endpoint levels. Given its offline status, further monitoring for reactivation or related infrastructure is recommended. The absence of an SSL certificate and the use of a well-known registrar for domain registration do not mitigate the threat; instead, they reinforce the need for heightened scrutiny of similar domains. No additional brand-specific targeting or visual content analysis is available at this time, but the scam type and detection patterns provide sufficient evidence for classification as a crypto drainer operation.