sxt[.]airsdropalert[.]click

This domain, sxt.airsdropalert.click, is identified as a generic phishing site specializing in fraudulent cryptocurrency airdrop schemes. Analysis indicates it does not impersonate a specific brand but instead mimics generic airdrop alert platforms to deceive users into disclosing sensitive information or transferring digital assets. The domain is currently offline, though its infrastructure remains a potential threat for future malicious activity. Infrastructure analysis reveals the domain was registered on November 05, 2025, through Dynadot, LLC, and resolves to the IP address 188.114.97.3. Security vendors on VirusTotal flagged the domain, with 14 out of 95 engines detecting malicious activity. It appears on one security blocklist, and its SSL certificate is issued by Google Trust Services (WE1). The page title, 'Welcome to nginx!', suggests a default server configuration, often indicative of hastily deployed phishing infrastructure. The domain has been taken offline, reducing immediate risk; however, its registration and hosting details remain active. Users are advised to block the domain and associated IP (188.114.97.3) at the network level. Organizations should monitor for references to this domain in logs or proxy data, particularly in contexts involving cryptocurrency transactions or user credential submissions. If encountered, any interaction with this domain should be treated as a potential compromise and investigated accordingly.