wazeline[.]com

Analysis as of July 24 2026 indicates that the domain wazeline.com is currently offline but was previously used for a brand‑impersonation campaign targeting the Across ecosystem through a fraudulent Arbitrum airdrop offer. The site presented the page title “Claim Your Share of the Arbitrum Ecosystem | Up to $25,000 for Active Wallets”, which aligns with the listed scam type “Fake Airdrop”. Registration data shows the domain was created on 21 February 2026 via Unstoppable Domains Inc., and it resolves to the IPv4 address 45.9.148.51. The IP is assigned to Nice IT Services Group Inc. (AS49447) and geolocates to the Netherlands. Reputation checks reveal that the domain appears on one security blocklist and is listed as blocked by PhishDestroy.

The Gridinsoft trust score is 0 out of 100, indicating a lack of trust. SSL inspection reports the certificate as “R11”, which is typically associated with low‑quality or self‑signed certificates. VirusTotal scanned the host and recorded a single positive detection out of 95 security vendors, confirming that at least one vendor flagged the domain as malicious. The available intelligence does not provide details on the underlying malicious infrastructure beyond the hosting IP, nor does it disclose any additional payloads, command‑and‑control servers, or victim interaction logs. Consequently, the full scope of the campaign, including the number of compromised wallets or the distribution method of the airdrop lure, remains uncertain.

Defenders should proactively block both the domain wazeline.com and its hosting address 45.9.148.51 at perimeter filters. Email and web security solutions ought to incorporate the observed page title and the “Fake Airdrop” indicator into detection rules. Continuous monitoring of the AS49447 block for new domains exhibiting similar characteristics is recommended, as well as updating threat intelligence feeds with the observed blocklist entries.