airdropunite[.]live

PhishDestroy analyzed the domain airdropunite.live and identified it as a brand impersonation phishing domain specifically targeting Revolut customers. The site, titled 'Unite Airdrop - Claim Your Tokens,' attempted to lure victims with promises of a cryptocurrency airdrop to steal their Revolut credentials and funds. No specific drainer kit was identified, but the page was designed to harvest sensitive information.

Technical indicators from the intelligence feed show that VirusTotal flagged this domain with a score of 1 out of 95 security vendors, meaning only one vendor detected it as malicious. The domain was registered through Web Commerce Communications Limited and resolves to IP address 104.21.96.1. The SSL certificate was issued by Google Trust Services (WE1), and the domain currently appears on one security blocklist. Google Safe Browsing status was not explicitly provided, but the domain has been taken offline.

As of the latest assessment, the domain is offline and no longer accessible. PhishDestroy recommends that users who may have interacted with the site change their Revolut passwords immediately, enable two-factor authentication, and monitor their accounts for unauthorized activity. The remaining risk is low given the domain's takedown, but vigilance is advised as similar domains may emerge.