airdrop-boundless[.]network

Analysis of airdrop-boundless.network indicates that the domain was created on September 08, 2025 and is presently taken offline. Registration records show the domain was acquired through Devexpanse Ltd operating as Regery.com. DNS resolution points to IP address 188.114.97.3, which is hosted within AS13335, a Cloudflare, Inc. network located in the United States. The domain utilizes Cloudflare name servers alice.ns.cloudflare.com and leonard.ns.cloudflare.com, and does not present an SSL/TLS certificate, leaving communications unencrypted.

Reputation scoring from Gridinsoft assigns a trust score of zero out of one hundred, reflecting a highly malicious posture. VirusTotal scanning reports that two out of ninety-five security vendors flagged the domain as malicious, reinforcing the suspicion of abusive activity. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. The listed scam type is a crypto scam, specifically a crypto drainer, which suggests attempts to hijack cryptocurrency assets.

While the exact content served by the site has not been captured, the convergence of a recent creation date, low trust score, minimal vendor detections, and blocklist presence supports classification as a crypto drainer operation. Defenders should continue to block the domain at perimeter devices, update detection rules to include the observed IP address and name server pair, and monitor for any resurgence of activity should the domain be reactivated. Additional investigation of any payloads or URLs previously associated with the domain is advisable to fully map the threat actor's infrastructure.