airdropscheck[.]com

Analysis of the domain airdropscheck.com shows that it was registered on August 04, 2026 through Dominet (HK) Limited and immediately pointed to the IP address 172.67.137.52, which belongs to Cloudflare’s network. The authoritative nameservers are rex.ns.cloudflare.com and wren.ns.cloudflare.com, confirming the use of Cloudflare as the hosting provider. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one defensive organization has observed malicious activity associated with it. VirusTotal records show that the site has been scanned by 91 antivirus and URL‑reputation engines; none of those vendors currently raise a detection, but the absence of flags does not constitute a safety guarantee.

The threat classification supplied is “crypto drainer,” and the domain name itself suggests a focus on fraudulent airdrop verification. No public page title, SSL certificate details, HTTP response code, or Safe Browsing verdict have been disclosed, so the exact content and transport security of the site remain unknown. The lack of additional blocklist entries or reputation scores limits the visibility of the infrastructure, yet the combination of a newly created domain, Cloudflare hosting, and inclusion on a phishing‑specific blocklist aligns with typical patterns used by actors who lure cryptocurrency users into submitting private keys or signing malicious transactions. Defenders should add airdropscheck.com to internal deny lists and monitor DNS query logs for any outbound resolution attempts.

Because the site resolves to a Cloudflare edge IP, network‑level blocking at the IP address may affect legitimate Cloudflare services; therefore, domain‑based filtering is preferred.