airdropnora[.]live

PhishDestroy identifies airdropro.live as an active domain engaged in brand impersonation targeting the Airdrop Scam ecosystem. The domain was registered on May 5, 2025 and is currently under investigation with an elevated risk profile. Threat actors are leveraging this domain to deceive users into engaging with fraudulent airdrop campaigns, potentially leading to crypto drainer activity or credential theft. This domain resolves to IP address 188.114.96.3 and is registered through Web Commerce Communications Limited dba WebNic.cc. Despite its recent creation, airdropro.live has not yet been flagged by VirusTotal scanning systems, showing 0 detections out of 95 vendor engines as of current analysis. The domain holds an SSL certificate issued by Google Trust Services, which may contribute to initial trust perception among potential victims. Current status indicates active threat progression with potential for rapid expansion. Users and organizations are strongly advised to block this domain at the network level and avoid any interaction with related communications. Implement strict URL filtering policies and update threat intelligence feeds to include airdropro.live. Report any observed activity to relevant cybersecurity authorities and maintain heightened awareness of Airdrop Scam-related campaigns.