airdrop-live[.]sbs

This domain, airdrop-live.sbs, is assessed as an active crypto drainer infrastructure with a high risk level as of July 19, 2026. Registered on March 1, 2026, through Global Domain Group LLC, it currently resolves to the IP address 196.251.107.97. Analysis indicates that 11 out of 95 security vendors on VirusTotal have flagged this domain, suggesting malicious intent consistent with cryptocurrency theft operations. The domain remains active, and its infrastructure has not been observed shifting or taken down, increasing the likelihood of ongoing exploitation. Defenders should treat this domain as hostile and prioritize blocking both the domain and its associated IP address in network security controls. No specific brand impersonation or website content has been confirmed at this stage, so monitoring for additional indicators of compromise, such as wallet addresses or transaction patterns linked to this domain, is recommended. Given the domain’s persistence and the nature of the threat, proactive measures such as DNS sinkholing or endpoint protection updates may be warranted to mitigate potential user exposure.