airdrop-sentient[.]app

The domain airdrop-sentient.app was registered on November 20, 2025 through NiceNIC International Group Co., Limited and is currently offline. DNS resolution points to the IPv4 address 95.214.235.117, which is advertised as part of AS30860 operated by Virtual Systems LLC in Ukraine. The domain is served by the authoritative name servers ns13.v-sys.org and ns14.v-sys.org, and no TLS certificate was observed for the site, indicating that HTTPS was not configured. HTTP requests return the page title "Account Suspended," which suggests the hosting provider or a takedown action has disabled the content.

The site has been identified as a crypto drainer scam; the specific malicious behavior has not been publicly detailed, but the classification aligns with the domain’s association with cryptocurrency fraud. Detection services have flagged the domain: thirteen of ninety‑five VirusTotal scanners reported malicious activity, and two independent blocklists (PhishDestroy and ScamSniffer) have listed the domain as hostile. No additional intelligence such as Safe Browsing or Open Threat Exchange references were provided.

The observable evidence confirms that the domain was actively used for malicious purposes before being taken offline, but the exact mechanisms—such as malicious payloads, phishing pages, or wallet addresses—remain unknown. Defenders should continue to block the domain at network perimeter devices, monitor for any re‑registration of the same name or similar subdomains, and maintain awareness of associated IP infrastructure, especially the Virtual Systems LLC address space, to pre‑empt potential reuse. Ongoing threat‑intel collection is recommended to capture any future activity that might surface if the domain becomes active again.