2131kobushide[.]allocated[.]live

Analysis of 2131kobushide.allocated.live shows a newly registered domain created on 21 February 2026 that resolves to IP 188.114.96.3, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The site is currently offline and does not present an SSL certificate, indicating the host has taken the service down or removed it. The page title returned when the domain was active reads "2131KOBUSHIDE | Airdrop", and the threat profile classifies the content as a crypto‑related airdrop scam that impersonates the Solana brand. The infrastructure matches a known “Airdrop Scam” phishing kit.

VirusTotal scans flag the domain in 10 of 93 security vendors, and the domain is listed on two independent blocklists, specifically PhishDestroy and ScamSniffer, both of which have already blocked it. Registration was performed through NameSilo, LLC, a registrar commonly used for short‑lived malicious domains. The combination of a fresh registration date, Cloudflare‑provided IP, lack of TLS, and the presence on multiple blocklists strongly suggests that the domain was used for a brand‑impersonation campaign targeting cryptocurrency users.

At present, the exact content of the landing page and any payloads are not publicly available because the site is offline. Defenders should continue to block the domain and its hosting IP at perimeter defenses, add the domain to threat‑intelligence feeds, and monitor for any re‑use of the same IP range or similar page titles. Additional investigation of historic HTTP archives or request logs could reveal the full phishing workflow, but the current evidence already warrants a high confidence rating for a crypto airdrop scam.