airdrop[.]lineas[.]run

This report details the technical threat profile of the domain airdrop.lineas.run. Based on the available data, the site impersonated an "Airdrop Scam" brand and was classified as a cryptocurrency scam type. Its page title, "Nur einen Moment…", suggests a brief loading or verification page, a common technique in phishing or token-draining schemes. The primary threat posed by this site is the potential theft of cryptocurrency assets by tricking users into connecting their wallets or providing private keys under the guise of a legitimate airdrop.

Technical evidence from the provided data shows the site was flagged by 5 out of 95 VirusTotal vendors. It was specifically flagged by ChainPatrol, alphaMountain.ai, CyRadar, Fortinet, and Gridinsoft, and appeared on 1 blocklist. The domain resolved to IP address 104.21.32.1, located in the United States and hosted by AS13335 Cloudflare, Inc. The domain was created on 2026-02-21 and used an SSL certificate identified as "WE1". The registrar details were not provided in the data.

The domain airdrop.lineas.run is currently reported as DOWN/OFFLINE. Its overall risk score is 70, indicating a high threat level. Given its creation date, scam classification, and low detection rate, it represents a significant risk to cryptocurrency users, particularly those seeking airdrops.