claim[.]airdropfamilyidn[.]com

This domain, claim.airdropfamilyidn.com, is flagged as a brand_impersonation threat targeting cryptocurrency users through an airdrop scam. Analysis indicates the site mimics legitimate airdrop campaigns to deceive victims into disclosing wallet credentials or transferring funds. The page title, 'ADFMIDN | Airdrop Claim,' reinforces the fraudulent branding, while no specific drainer kit was conclusively identified in initial triage. Infrastructure analysis reveals the domain was registered on June 8, 2024, through CV. Jogjacamp and resolves to the IP address 76.76.21.142. VirusTotal detection shows 1 out of 95 security vendors flagged the domain as malicious, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and was previously blocked by PhishDestroy. Technologies detected include Vercel for hosting, jsDelivr for content delivery, and HSTS implementation, suggesting an attempt to appear legitimate. The domain is currently offline, reducing immediate risk to users. However, residual threats persist, including potential re-registration under a new registrar or IP. Organizations should monitor for related infrastructure, such as shared IPs or domains registered through the same entity. Users are advised to verify airdrop legitimacy through official project channels and avoid interacting with unsolicited claims, particularly those hosted on newly registered domains or third-party platforms.