airdrop[.]agentifyai[.]xyz

Analysis of the domain airdrop.agentifyai.xyz confirms its classification as an active phishing site targeting WalletConnect users through a fraudulent airdrop scheme. The domain was registered on March 6, 2025, via HOSTINGER operations, UAB, and currently resolves to the IP address 216.150.1.65. As of July 12, 2026, the site remains operational, with the page title displayed as 'Agentify AI | Airdrop,' which aligns with the identified phishing kit labeled 'Airdrop Scam.' Detection data indicates moderate but consistent flagging by security vendors. Five out of ninety-five security vendors on VirusTotal have marked the domain as malicious, while it appears on two independent security blocklists, including PhishDestroy and BLP-Malware. The combination of brand impersonation, active status, and confirmed blocklist presence elevates the risk level to high. Infrastructure analysis reveals no additional hosting or registrar anomalies beyond the current resolution and registration details. The domain's creation date, while not recent, does not diminish its ongoing threat, as phishing campaigns frequently reuse older domains to evade immediate suspicion. Defenders should prioritize blocking the domain and its resolving IP at the network level, while end-users should be alerted to the specific impersonation of WalletConnect, particularly in contexts involving airdrop promotions. Further investigation into the phishing kit's distribution methods and associated infrastructure is recommended to disrupt related campaigns.