org-airdrop[.]com

org-airdrop.com entered the PhishDestroy evidence set on Sep 16, 2025. The hostname uses “airdrop,” a pattern consistent with a airdrop lure; no target brand is confirmed from stored content. The stored content classification is airdrop scam. The assembled evidence scores 89/100 (high).

One independent source is positive: VirusTotal. VirusTotal recorded 8 detections among 95 engines: alphaMountain.ai, CRDF, CyRadar, Forcepoint ThreatSeeker, Fortinet, Lionic, Seclookup, Webroot on Jul 18, 2026 at 18:45 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. URLQuery recorded no positive detection. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict (score 0) on Mar 5, 2026 at 01:30 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 10:15 UTC. Registration records for the domain list GMO Internet, Inc. as the registrar and Sep 14, 2025 as the creation date. Registration preceded first observation by 1 day. At collection time, the hostname resolved to 185.53.177.51 on AS61969 (TEAMINTERNET-AS Team Internet AG, DE). The associated network metadata labels the endpoint as AS61969 Team Internet AG in Munich, DE. The stored server header is Caddy. Captured page title: “org-airdrop.com”. DOM analysis completed on Apr 11, 2026 at 03:21 UTC; stored DOM score 0/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 02:44 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings.