distribution-gacha[.]com

The domain distribution-gacha.com is identified as a high-risk brand impersonation threat, specifically targeting users with an airdrop scam. The domain is currently offline and was impersonating a legitimate airdrop portal to deceive users into divulging sensitive information or performing transactions that could lead to financial loss.

Infrastructure analysis reveals that distribution-gacha.com was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 01, 2026. The domain resolves to the IP address 172.67.188.159 and was flagged by 10 out of 95 security vendors on VirusTotal. Additionally, the domain appears on four security blocklists and has a Gridinsoft trust score of 0 out of 100. The SSL certificate used was from Google Trust Services, which may have been intended to lend an air of legitimacy to the fraudulent site. Technologies detected include HSTS, Cloudflare Browser Insights, and HTTP/3, suggesting efforts to mimic a secure and legitimate web presence.

Given the current offline status of the domain, users are advised to remain vigilant and avoid visiting or interacting with distribution-gacha.com if it becomes active again. Organizations should update their security policies to include this domain in their blocklists and monitor for any related malicious activity. Further, users should be educated on the signs of brand impersonation and airdrop scams to minimize the risk of falling victim to such tactics.