chirpairdrop[.]live

The domain chirpairdrop.live was identified as a phishing site engaging in brand impersonation, specifically targeting users of Revolut. The website was themed as an airdrop scam, using the page title 'Chirp Airdrop - Claim Your Tokens Now!' to lure visitors. As of the latest assessment, chirpairdrop.live is offline and no longer accessible, but it previously posed a risk to individuals seeking cryptocurrency airdrops or Revolut-related services.

Technical analysis shows that chirpairdrop.live was registered through Web Commerce Communications Limited and resolved to IP address 104.21.32.1, located in the US under AS13335 Cloudflare, Inc. The domain appeared on one security blocklist (PhishDestroy) and was flagged by 1 of 95 security vendors on VirusTotal, specifically Gridinsoft. Google Safe Browsing did not flag the site. No SSL certificate was observed, and the domain used Cloudflare nameservers (jade.ns.cloudflare.com and patrick.ns.cloudflare.com). The creation date and SSL issuer information were not available.

Individuals who visited chirpairdrop.live and interacted with its airdrop scam should be cautious of potential credential theft or cryptocurrency fraud. If any wallet information or credentials were entered, users should change associated passwords, enable two-factor authentication, and monitor accounts for unauthorized activity. Those who approved token transactions should revoke any permissions and consider moving funds to a new wallet. Suspected phishing sites like chirpairdrop.live can be reported to blocklists such as PhishDestroy and relevant authorities to help prevent further incidents.