asteroidshiba-erc[.]icu

Analysis of asteroidshiba-erc.icu indicates a fraudulent airdrop scheme targeting cryptocurrency users. The domain, registered on April 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, was taken offline prior to this report. Infrastructure analysis reveals Cloudflare hosting (AS13335) at IP 104.21.88.135, with nameservers henrik.ns.cloudflare.com and sloan.ns.cloudflare.com. The SSL certificate, issued by Let's Encrypt (YE1), provides standard encryption but does not validate legitimacy. The page title 'Dogeus Maximus Airdrop' explicitly signals a fake airdrop scam, a tactic commonly used to harvest wallet credentials or distribute malware.

Detection data shows limited but consistent flagging: one security blocklist (PhishDestroy) and two of 91 vendors on VirusTotal identified the domain as malicious. AlienVault OTX recorded a single threat intelligence pulse referencing this domain, while Gridinsoft assigned a trust score of 0/100. No Safe Browsing or additional vendor confirmations were present in the available data. The scam type, labeled as 'Fake Airdrop,' aligns with the page title and known phishing kit patterns, though the specific kit variant remains unconfirmed. Defenders should treat this domain as a confirmed phishing asset.

Blocklist integration at the DNS and proxy levels is recommended, along with monitoring for related domains using the same registrar, hosting provider, or SSL issuer. The short registration-to-offline timeline suggests possible ephemeral use, a common trait in phishing campaigns. Further investigation may reveal connections to broader airdrop-themed phishing clusters, particularly those leveraging Cloudflare infrastructure to obscure origin servers. No brand impersonation beyond the page title is confirmed; the exact content and functionality of the site remain unanalyzed.