airdrop[.]chainbaese[.]com

The domain airdrop.chainbaese.com is a confirmed phishing site engaged in brand impersonation, specifically targeting Google as part of a cryptocurrency scam. This site was designed to deceive users into believing they were interacting with a legitimate Google service, likely to harvest sensitive information or facilitate fraudulent transactions. As of the latest verification, airdrop.chainbaese.com has been taken offline, though its prior activity poses an elevated risk to those who may have encountered it.

Technical analysis reveals that airdrop.chainbaese.com was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through MAT BAO CORPORATION on February 21, 2026, and resolved to the IP address 192.178.155.147, hosted under AS15169 (Google LLC) in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Google'. Nameservers for the domain included earl.ns.cloudflare.com and serenity.ns.cloudflare.com. Google Safe Browsing did not flag the domain at the time of assessment.

Individuals who visited airdrop.chainbaese.com should take immediate action to mitigate potential risks. For cryptocurrency-related scams, revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. If login credentials were entered, change passwords for the affected accounts, enable two-factor authentication, and monitor for unauthorized activity. Report the domain to relevant platforms, such as Google Safe Browsing, PhishTank, or local cybersecurity authorities, to assist in broader threat mitigation efforts.