airdrop-mitosis[.]org

The domain airdrop-mitosis.org was a crypto drainer phishing site designed to steal cryptocurrency by draining funds from connected wallets. It did not impersonate a specific brand or use a known drainer kit. As of the latest verification, airdrop-mitosis.org has been taken offline, though its prior activity posed an elevated risk to users who may have interacted with it.

Technical indicators for airdrop-mitosis.org include minimal detection at the time of analysis, with 1 of 95 VirusTotal security vendors flagging the domain. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on August 20, 2025, and resolved to the IP address 104.21.16.1, hosted on Cloudflare's network (AS13335) in the US. It appeared on 1 security blocklist (PhishDestroy) and used an SSL certificate issued by WE1. The observed page title was 'Nur einen Moment…', and Gridinsoft assigned it a trust score of 0/100. Google Safe Browsing did not flag the domain at the time of assessment.

Users who connected a wallet to airdrop-mitosis.org should immediately revoke all token approvals using a tool like Etherscan's token approval checker or Revoke.cash. Funds should be moved to a new, secure wallet to prevent further unauthorized transactions. If credentials or private keys were entered, enable two-factor authentication on all accounts and monitor for fraudulent activity. Report the domain to platforms such as Google Safe Browsing, PhishTank, or local cybercrime authorities to aid in takedown efforts.