lobstar-wilde[.]com

Analysis of lobstar-wilde.com indicates that the domain was registered on 22 March 2026 through Hello Internet Corp and immediately pointed to Cloudflare infrastructure, using the authoritative nameservers corey.ns.cloudflare.com and tiffany.ns.cloudflare.com. DNS resolution returns the IP address 172.67.202.222, which belongs to Cloudflare, Inc. in Canada. The site employed HSTS and HTTP/3, but no TLS certificate was observed, suggesting the service was delivered without a valid HTTPS binding at the time of takedown. The page title returned by the site, “LOBSTAR Airdrop — Claim Your $LOBSTAR”, aligns with a known “Airdrop Scam” phishing kit targeting cryptocurrency users.

VirusTotal scans recorded three detections out of ninety‑four submitted security vendors, and the Gridinsoft trust score was recorded as zero out of one hundred, reinforcing the malicious classification. The domain is listed on four external blocklists and has been actively blocked by commercial filtering services including PhishDestroy, MetaMask, ScamSniffer, and SEAL. The current operational status is offline, and no further content is reachable for direct inspection. Defenders should treat any DNS resolution of lobstar-wilde.com as hostile.

Network traffic to the associated Cloudflare IP should be denied or redirected to a sinkhole, and any internal references to the “LOBSTAR” brand or similar airdrop terminology should be flagged for additional scrutiny. Because the domain leverages Cloudflare’s edge network, simple IP‑based blocking may affect legitimate Cloudflare services; therefore, rule sets should target the exact FQDN or employ hostname‑based filtering. Continuous monitoring of the registrar Hello Internet Corp for new registrations that reuse the same nameserver pair may reveal a pattern of rapid re‑deployment.