Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@globaldomaingroup.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
1drop[.]life
“Airdrop Live | Claim Solana Token Airdrops”
1drop.life — Ulaşılabilir · erişim kısıtlı (HTTP 403). Marka kimliğine bürünme: Solana; Dolandırıcılık türü: Fake Airdrop. Kanıt özeti: VirusTotal 13/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLQuery 4 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 93/100. Kayıt kuruluşu: Global Domain Group.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
The domain 1drop.life was registered on March 22, 2026 through Global Domain Group LLC and is currently resolved to the Cloudflare‑owned address 104.21.57.244, located in Canada. Its TLS certificate is issued by Let’s Encrypt (E7), and the domain is served behind Cloudflare infrastructure, as indicated by the presence of Cloudflare Browser Insights, HTTP/3 support, and the authoritative nameservers matias.ns.cloudflare.com and rayne.ns.cloudflare.com. The site returned an HTTP 403 response before being taken offline, and its page title – “Airdrop Live | Claim Solana Token Airdrops” – explicitly references the Solana blockchain, confirming the impersonation of the Solana brand.
Malware and URL scanners on VirusTotal recorded seven detections out of ninety‑four vendors, and the domain appears on three external security blocklists. It has been flagged by PhishDestroy, MetaMask, and SEAL as a fake airdrop operation, matching the publicly identified “Airdrop Scam” phishing kit. While the site’s content has not been captured, the convergence of brand‑specific page title, malicious kit attribution, and multiple vendor detections provides strong evidence of a credential‑ harvesting or token‑distribution scam targeting Solana users.
Defenders should continue to block the domain at network perimeter, update URL filtering feeds with the observed indicators, monitor for any re‑hosting attempts on the same IP range, and advise users to avoid unsolicited Solana airdrop links. Uncertainty remains regarding any additional payloads that may have been delivered before the site was taken down, so threat‑intel teams should request historic snapshots if available to confirm any secondary malicious behavior.
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | dallying-reveler.fontmaxplugin.cc |
malicious | Sinkholed |
| Cloudflare DNS | dallying-reveler.fontmaxplugin.cc |
malicious | Sinkholed |
| DigiCert UltraDNS | dallying-reveler.fontmaxplugin.cc |
malicious | Sinkholed |
| Hagezi Threat Feed | dallying-reveler.fontmaxplugin.cc |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknolojiler · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of 1drop.life · checked Mar 21, 2026
Kanıtlar ve Dış Raporlar
PD-20260321-09FA31 Recipient: abuse@globaldomaingroup.com Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin