airdropzap[.]live

The domain airdropzap.live was a crypto drainer phishing site designed to steal cryptocurrency by tricking users into connecting their wallets. It did not impersonate a known brand and no specific drainer kit was identified. The site is currently taken offline, but it previously posed an elevated risk to users searching for token airdrops.

Technical indicators show airdropzap.live had minimal detection at the time of analysis, with only 1 of 95 VirusTotal security vendors flagging it. The domain was registered through Web Commerce Communications Limited dba WebNic.cc and resolved to the IP address 188.114.97.3, hosted on Cloudflare's network (AS13335). It appeared on 1 security blocklist (PhishDestroy) and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Zap Airdrop - Claim Your Tokens', and technologies detected included Cloudflare Browser Insights and HTTP/3. Gridinsoft assigned it a trust score of 0/100, consistent with its classification as a cryptocurrency scam.

Users who interacted with airdropzap.live should immediately revoke any token approvals granted to the site and transfer remaining funds to a new wallet. To revoke approvals, use a blockchain explorer or a dedicated tool like Revoke.cash. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader takedown efforts. Monitor wallet activity for unauthorized transactions and enable transaction simulation tools to preview actions before signing.