airdrop[.]node[.]my

This domain, airdrop.node.my, is classified as a brand impersonation threat targeting the Manta cryptocurrency brand. The page title observed was NODE.MY - Integrasi Sistem & Solusi Perisian, indicating a facade of legitimate software services. Analysis suggests this domain was designed to host a crypto drainer, a type of phishing kit that tricks users into connecting wallets or sharing private keys, leading to asset theft. The unique seed ac63be confirms this specific variant.

Infrastructure analysis reveals concrete technical indicators. VirusTotal shows 2 out of 95 security vendors flagged this domain as malicious. The domain was registered through Shinjiru Technology Sdn Bhd on December 05, 2021. It resolves to IP address 128.199.211.196. The domain has a Gridinsoft trust score of 0 out of 100 and appears on exactly 1 security blocklist. Google Safe Browsing status is not listed but the domain is currently offline. Threat type is specifically brand impersonation, not a generic phishing attempt.

Current status shows airdrop.node.my has been taken offline by security response actions, including being blocked by PhishDestroy. However, remaining risk exists as the threat actor may register similar domains or redeploy the drainer kit under a new domain. Users should avoid interacting with any unsolicited airdrop offers from Manta or similar brands. Safety recommendations include verifying URLs through official channels, never connecting wallets to unknown sites, and reporting suspicious domains to security teams. This domain represents an elevated risk due to its targeted brand impersonation and use of a crypto drainer.