mycryptoairdrop[.]io

The domain mycryptoairdrop.io is actively hosted and serves a page titled “MY AIR DROP”. Registration data shows the domain was created on 22 August 2025 via GoDaddy.com, LLC and uses GoDaddy’s default nameservers ns07.domaincontrol.com and ns08.domaincontrol.com. The SSL certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority – G2, and HSTS is enforced. Infrastructure resolves to 13.248.243.5, an Amazon.com, Inc. address (AS16509) located in the United States. VirusTotal has one of ninety‑five security vendors flagging the domain, and the site appears on a single public blocklist; it is also listed by PhishDestroy. Automated reputation scoring (Gridinsoft) rates the domain at 0 / 100, indicating a high likelihood of malicious use. Detected technologies include GoDaddy Website Builder, RequireJS, and Re:amaze. The site is categorized as a cryptocurrency scam and specifically impersonates the Arbitrum brand. No additional content analysis is available beyond the page title. Defenders should block the domain at perimeter filters, update DNS blocklists, and monitor outbound connections to the Amazon IP range for any unexpected traffic. Further investigation of the landing page content is recommended to confirm the phishing vector and to collect any payload indicators.