claim[.]superformfoundation[.]xyz

Analysis identifies claim.superformfoundation.xyz as a brand impersonation phishing domain, specifically targeting the Discord platform under the guise of a Superform Airdrop. This threat type is a fake login page designed to harvest user credentials or cryptocurrency wallet access. No specific drainer kit was identified, but the page title Superform Airdrop indicates a lure for crypto-related theft.

Technical indicators reveal the domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. VirusTotal flags the domain with a score of 2 out of 95 security vendors, and it resolves to IP address 67.223.118.124. The domain appears on 2 security blocklists and is blocked by ScamSniffer and PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, confirming malicious intent. Google Safe Browsing status was not available in the provided data.

As of analysis, the domain is offline. Response actions have been taken by security vendors, including ScamSniffer and PhishDestroy, which have blocked the domain. Residual risk remains low due to the takedown, but users should remain vigilant for similar domains targeting Discord or crypto airdrop scams. Recommendations include avoiding entering credentials on sites claiming airdrops and using browser-based phishing protection.