airdrop002[.]top

The domain airdrop002.top was registered on July 13, 2026 through NameMart Pte. Ltd. and is currently active. DNS resolution points to the IP address 104.21.73.135, hosted behind Cloudflare’s infrastructure as indicated by the authoritative nameservers byron.ns.cloudflare.com and vida.ns.cloudflare.com. On VirusTotal the domain has been flagged by one of ninety‑one security vendors, establishing at least a single independent detection of malicious activity. The short lifespan, use of a reputable CDN, and the single detection suggest a newly deployed operation aimed at draining cryptocurrency assets, consistent with the reported threat type. Concrete content from the site has not been publicly disclosed, leaving the exact phishing vector and victim interaction unknown. Defenders should treat the domain as high‑risk: block the FQDN and its resolved IP at network perimeters, add the nameserver pair to watchlists for rapid detection of similarly configured domains, and monitor outbound traffic for attempts to contact the IP. Continuous re‑scanning of the domain on threat‑intel platforms is advised to capture any escalation in detection counts or emerging indicators of compromise.