synapsereward[.]live

Analysis of synapsereward.live shows the domain was registered on 21 February 2026 and was taken offline before the report date. The site was used to promote a fake airdrop, a common cryptocurrency‑related social engineering lure. The domain resolves to IP 216.198.79.1, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. An SSL certificate with an R10 rating was observed, indicating a low trust score.

The domain appears on five public security blocklists and is actively blocked by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. VirusTotal scans recorded detections by two of ninety‑three AV engines, confirming malicious classification. Although the site is currently offline, the infrastructure details—cloud hosting on a major provider, low‑rated TLS certificate, and rapid blocklist inclusion—suggest a typical short‑lived phishing campaign.

Defenders should continue to block the domain and its associated IP at perimeter defenses, update URL filtering policies, and monitor for any resurrection or similar domains that reuse the same hosting provider or naming pattern. Incident response teams should also consider adding the domain to internal blacklists and verify that any email or messaging channels that reference the airdrop lure are flagged for user awareness training. Ongoing threat‑intel feeds should be consulted for new indicators that may arise from related campaigns.