piairdrop[.]ct[.]ws

This domain, piairdrop.ct.ws, was actively impersonating legitimate cryptocurrency airdrop services to deceive users into connecting wallets or submitting sensitive information. Such scams typically operate by promising free tokens or rewards, then draining funds from victims' wallets through malicious smart contracts or phishing forms. The site's infrastructure and content were designed to mimic official airdrop campaigns, increasing the likelihood of successful fraud against unsuspecting users. Analysis indicates the domain was registered on November 01, 2024, through NameCheap, Inc., a registrar frequently abused for malicious activity. As of the latest scan, VirusTotal reports 2 out of 95 security vendors flagged the domain as malicious, confirming its involvement in fraudulent operations. The domain appeared on one security blocklist and was subsequently taken offline, though residual risks may persist for users who interacted with it prior to its removal. If you visited piairdrop.ct.ws or engaged with its content, immediately disconnect any connected wallets from the site and revoke permissions via your wallet's connected apps settings. Scan your device for malware using updated security tools, and monitor your cryptocurrency transactions for unauthorized activity. Change passwords for any accounts linked to the site, and enable multi-factor authentication where possible. Report the incident to relevant platforms or authorities to assist in tracking and mitigating further threats.