white-haired[.]lol

Analysis indicates white-haired.lol is a brand impersonation asset targeting Binance users, presenting a fraudulent $白毛股神 Airdrop themed landing page consistent with crypto drainer infrastructure. The page is designed to simulate token distribution incentives and likely attempts to induce wallet connection and transaction signing for asset exfiltration. No legitimate association with Binance is observed, and the naming pattern suggests meme-coined social engineering to increase engagement.

Technical telemetry shows multiple independent risk signals: VirusTotal score 5/95 security vendors flagging the domain, and inclusion in 3 security blocklists. Threat intelligence aggregation reports 4 AlienVault OTX pulses referencing the infrastructure. The domain uses SSL issued via Google Trust Services, likely to increase perceived legitimacy. Hosting resolves to IP 172.67.175.204. Registration records indicate PDR Ltd. d/b/a PublicDomainRegistry.com as registrar, with creation date June 08 2026.

At time of assessment, the domain status is offline; however historical exposure includes blocks by MetaMask, PhishDestroy, and SEAL, indicating active defensive ecosystem response. Despite takedown, residual risk remains due to potential redeployment under new domains or reuse of the same wallet-draining templates. Recommended actions include continued monitoring of associated IP 172.67.175.204, keyword tracking of $白毛股神 Airdrop lures, and correlation with newly registered lookalike domains to prevent reactivation campaigns.