Search tracked domains and review stored evidence, detections, and the latest observed availability.

197,327
Total Tracked
197,327
VT Detected
89,866
Last Seen Active
99,381
Unavailable at Last Check
0
VT Pending
Fake Airdrop Scam
HIGH THREAT

Understanding the Fake Airdrop Scam: Protecting Your Digital Assets

PhishDestroy currently associates 6,268 tracked domain reports with Fake Airdrop Scam. Review stored detections, evidence, and the latest observed availability below.

6,268
Domains Detected
HIGH
Threat Level

How This Attack Works

Fake Airdrop Scams exploit the burgeoning interest in cryptocurrencies by deceiving users into believing they are receiving free tokens.

STEP 1
Bait with Free Tokens
Scammers create fake websites promising free cryptocurrency airdrops to lure victims.
STEP 2
Collect Personal Data
Users are prompted to enter personal details or connect their crypto wallets to receive the airdrop.
STEP 3
Execute a Scam Transaction
Once connected, scammers initiate unauthorized transactions or steal sensitive data.
STEP 4
Disappear with the Loot
Scammers transfer stolen funds to anonymous accounts, disappearing without a trace.

Technical Analysis

Fake Airdrop Scams often involve sophisticated phishing techniques. Attackers use clone websites that mimic legitimate airdrop events. These sites are built using JavaScript and HTML to create convincing interfaces. Scammers may employ smart contract functions such as 'transfer' and 'approve' to gain unauthorized access to victims' wallets. Additionally, phishing emails and social media posts are used to drive traffic to these malicious websites. Infrastructure often involves domains registered through top registrars like NICENIC INTERNATIONAL GROUP CO., LIMITED, ensuring anonymity and making it challenging to track the perpetrators.

Real Cases

The Ethereum Classic Airdrop Scam (2024)
$3.5 million stolen
Scammers created a fake Ethereum Classic airdrop event, stealing millions from unsuspecting users.
Fake Uniswap Airdrop (2023)
$2 million stolen
A bogus Uniswap token airdrop fooled users into relinquishing control of their wallets.
The Polkadot Giveaway Fraud (2024)
$1 million stolen
A fake Polkadot giveaway led to substantial financial losses for crypto enthusiasts.

How to Detect

Unsolicited messages about free airdrops
Domains with unusual TLDs like .xyz and .top
Requests for private keys or wallet access
Poorly designed websites with typos
Urgent calls-to-action pressuring immediate response

How to Protect Yourself

1 Verify airdrop legitimacy through official channels
2 Avoid clicking on unsolicited links
3 Use hardware wallets for extra security
4 Enable two-factor authentication
5 Regularly update software and security protocols

Frequently Asked Questions

What is Fake Airdrop Scam?
Fake Airdrop Scams deceive users by offering free cryptocurrency tokens, leading them to fraudulent sites to steal personal and financial information.
How much money has been stolen through Fake Airdrop Scam?
Millions of dollars have been stolen, with significant cases like the Ethereum Classic Airdrop Scam costing $3.5 million in 2024.
How do I protect myself from Fake Airdrop Scam?
Verify all airdrop offers through official sources, avoid clicking unknown links, and secure your crypto assets with hardware wallets and 2FA.
What should I do if I'm a victim of Fake Airdrop Scam?
Immediately report the incident to your local authorities and contact your bank or wallet provider to secure your accounts and limit further losses.
Data sourced from PhishDestroy threat intelligence database — 6,268 domains tracked for this threat type
Airdrop Scam — Threat Intelligence Kit High Threat
6,268
Domains
2,140
Alive
3,116
Taken Down
7.2
Avg VT
34.1%
Alive Rate
97.1%
Detected
Since Mar 2024 3,512 domains with VT ≥ 5
Fake Airdrop Scam 6,268 domains
Screenshot of sachi.news
sachi.news
7 VTUnknownSolana Drainerrevolut
Screenshot of sachi.news
sachi.news
Screenshot of sachitoken.xyz
sachitoken.xyz
7 VTUnknownSolana Drainersolana
Screenshot of sachitoken.xyz
sachitoken.xyz
Screenshot of sca.airdrpsalerts.cfd
sca.airdrpsalerts.cfd
7 VTUnknown
Screenshot of sca.airdrpsalerts.cfd
sca.airdrpsalerts.cfd
Screenshot of send-bag.fun
send-bag.fun
7 VTUnknown
Screenshot of send-bag.fun
send-bag.fun
Screenshot of senitient.xyz
senitient.xyz
7 VTUnknown
Screenshot of senitient.xyz
senitient.xyz
Screenshot of shibos.vip
shibos.vip
7 VTUnknownAngel Drainercoinbase
Screenshot of shibos.vip
shibos.vip
Screenshot of slunisvwap.info
slunisvwap.info
7 VTActiveacross
Screenshot of slunisvwap.info
slunisvwap.info
Screenshot of snapshot-asterdex.com
snapshot-asterdex.com
7 VTUnknownbnb chain
Screenshot of snapshot-asterdex.com
snapshot-asterdex.com
Screenshot of snowball-sol.xyz
snowball-sol.xyz
7 VTUnknownbackpack
Screenshot of snowball-sol.xyz
snowball-sol.xyz
Screenshot of sol-collect.online
sol-collect.online
7 VTUnknownSolana
Screenshot of sol-collect.online
sol-collect.online
Screenshot of solagood.com
solagood.com
7 VTUnknownfoundation
Screenshot of solagood.com
solagood.com
Screenshot of solana-lobstarwilde.com
solana-lobstarwilde.com
7 VTActiveSolana DrainerSolana
Screenshot of solana-lobstarwilde.com
solana-lobstarwilde.com
Screenshot of solix.click
solix.click
7 VTActivejupiter
Screenshot of solix.click
solix.click
Screenshot of solpull.net
solpull.net
7 VTUnknownSolana DrainerSolana
Screenshot of solpull.net
solpull.net
Screenshot of sotlstice.finance
sotlstice.finance
7 VTUnknown
Screenshot of sotlstice.finance
sotlstice.finance
Screenshot of spaceandtime.airdrpsalert.click
spaceandtime.airdrpsalert.click
7 VTUnknown
Screenshot of spaceandtime.airdrpsalert.click
spaceandtime.airdrpsalert.click
Screenshot of starknet.portal-drops.dev
starknet.portal-drops.dev
7 VTUnknownAngel DrainerStarknet
Screenshot of starknet.portal-drops.dev
starknet.portal-drops.dev
Screenshot of sui.portal-drops.dev
sui.portal-drops.dev
7 VTUnknownAngel Drainerbinance
Screenshot of sui.portal-drops.dev
sui.portal-drops.dev
Screenshot of superformoundation.org
superformoundation.org
7 VTUnknowngenericcrypto
Screenshot of superformoundation.org
superformoundation.org
Screenshot of swapux-jup.icu
swapux-jup.icu
7 VTActiveGoogle
Screenshot of swapux-jup.icu
swapux-jup.icu
Screenshot of test.hitsol.xyz
test.hitsol.xyz
7 VTUnknownSolana Draineracross
Screenshot of test.hitsol.xyz
test.hitsol.xyz
tge-flt.com
7 VTActiveAirdrop Scam
Screenshot of theelitecats.xyz
theelitecats.xyz
7 VTUnknown
Screenshot of theelitecats.xyz
theelitecats.xyz
Screenshot of thefirehorse.officialrewards.live
thefirehorse.officialrewards.live
7 VTUnknown["solana"]
Screenshot of thefirehorse.officialrewards.live
thefirehorse.officialrewards.live
Screenshot of thelionpage.xyz
thelionpage.xyz
7 VTUnknownAngel Drainer
Screenshot of thelionpage.xyz
thelionpage.xyz
Screenshot of trezumm.co
trezumm.co
7 VTActive
Screenshot of trezumm.co
trezumm.co
Screenshot of trump-drops.top
trump-drops.top
7 VTUnknownSolana DrainerSolana
Screenshot of trump-drops.top
trump-drops.top
Screenshot of tst.officialrewards.live
tst.officialrewards.live
7 VTUnknownSolana Drainerceler
Screenshot of tst.officialrewards.live
tst.officialrewards.live
Screenshot of twin-event.fun
twin-event.fun
7 VTUnknownSolana Drainersolana
Screenshot of twin-event.fun
twin-event.fun
Screenshot of twt02.top
twt02.top
7 VTUnknownAngel Drainerarbitrum
Screenshot of twt02.top
twt02.top
Screenshot of uniscp.top
uniscp.top
7 VTUnknownAngel Draineraave
Screenshot of uniscp.top
uniscp.top
Screenshot of uplandme.info
uplandme.info
7 VTActive
Screenshot of uplandme.info
uplandme.info
Screenshot of uscr-event.notiondex.xyz
uscr-event.notiondex.xyz
7 VTUnknownSolana Drainersolana
Screenshot of uscr-event.notiondex.xyz
uscr-event.notiondex.xyz
Screenshot of verifiedmultisig.icu
verifiedmultisig.icu
7 VTUnknown
Screenshot of verifiedmultisig.icu
verifiedmultisig.icu
Screenshot of virtual-protocol.xyz
virtual-protocol.xyz
7 VTUnknownAngel Drainerdiscord
Screenshot of virtual-protocol.xyz
virtual-protocol.xyz
Screenshot of voucher-5606.notcolayer.app
voucher-5606.notcolayer.app
7 VTUnknown
Screenshot of voucher-5606.notcolayer.app
voucher-5606.notcolayer.app
Screenshot of vwa.allocation.pro
vwa.allocation.pro
7 VTUnknownSolana Drainerrevolut
Screenshot of vwa.allocation.pro
vwa.allocation.pro
Screenshot of wallstreetpepesclaim.xyz
wallstreetpepesclaim.xyz
7 VTUnknownGoogle
Screenshot of wallstreetpepesclaim.xyz
wallstreetpepesclaim.xyz
Screenshot of watchor.xyz
watchor.xyz
7 VTUnknown
Screenshot of watchor.xyz
watchor.xyz
Screenshot of web3okx.life
web3okx.life
7 VTUnknownOKX
Screenshot of web3okx.life
web3okx.life
Screenshot of webmail.advisor-coinbase.support
webmail.advisor-coinbase.support
7 VTActiveCoinbase
Screenshot of webmail.advisor-coinbase.support
webmail.advisor-coinbase.support
Screenshot of woridiibertyflnance.icu
woridiibertyflnance.icu
7 VTUnknownmetamask
Screenshot of woridiibertyflnance.icu
woridiibertyflnance.icu
Screenshot of ww25.hostmaster.hostmaster.www.bitcoinbase.io
ww25.hostmaster.hostmaster.www.bitcoinbase.io
7 VTUnknownCoinbase
Screenshot of ww25.hostmaster.hostmaster.www.bitcoinbase.io
ww25.hostmaster.hostmaster.www.bitcoinbase.io
Screenshot of ww25.info-coinbase.support
ww25.info-coinbase.support
7 VTUnknownCoinbase
Screenshot of ww25.info-coinbase.support
ww25.info-coinbase.support
Screenshot of ww25.mailhost.coinbase-support.expert
ww25.mailhost.coinbase-support.expert
7 VTUnknownCoinbase
Screenshot of ww25.mailhost.coinbase-support.expert
ww25.mailhost.coinbase-support.expert
Screenshot of ww25.yst.coinbasebit256.com
ww25.yst.coinbasebit256.com
7 VTUnknownCoinbase
Screenshot of ww25.yst.coinbasebit256.com
ww25.yst.coinbasebit256.com
Screenshot of www-sachi.network
www-sachi.network
7 VTUnknownSolana Drainerrevolut
Screenshot of www-sachi.network
www-sachi.network
Screenshot of www-yzy.network
www-yzy.network
7 VTUnknownSolana Drainerrevolut
Screenshot of www-yzy.network
www-yzy.network
Screenshot of www.dhl-paketzentral.de
www.dhl-paketzentral.de
7 VTUnknowndhl
Screenshot of www.dhl-paketzentral.de
www.dhl-paketzentral.de
Screenshot of www.trc20.finance
www.trc20.finance
7 VTUnknowngenericcrypto
Screenshot of www.trc20.finance
www.trc20.finance
Screenshot of xberry.sbs
xberry.sbs
7 VTUnknownWallet Connect Abusefoundation
Screenshot of xberry.sbs
xberry.sbs
Screenshot of xrpdistributions.firebaseapp.com
xrpdistributions.firebaseapp.com
7 VTUnknownIce Phishingfoundation
Screenshot of xrpdistributions.firebaseapp.com
xrpdistributions.firebaseapp.com
Screenshot of zkverifyairdrop.xyz
zkverifyairdrop.xyz
7 VTUnknown
Screenshot of zkverifyairdrop.xyz
zkverifyairdrop.xyz
Screenshot of zoomgov.sbs
zoomgov.sbs
7 VTActive
Screenshot of zoomgov.sbs
zoomgov.sbs
Screenshot of 0xdegen.xyz
0xdegen.xyz
6 VTUnknown
Screenshot of 0xdegen.xyz
0xdegen.xyz
Screenshot of 0xdeployer.xyz
0xdeployer.xyz
6 VTUnknown
Screenshot of 0xdeployer.xyz
0xdeployer.xyz
Screenshot of 0xp1.top
0xp1.top
6 VTUnknown
Screenshot of 0xp1.top
0xp1.top
Screenshot of 0xscanpool.xyz
0xscanpool.xyz
6 VTUnknown
Screenshot of 0xscanpool.xyz
0xscanpool.xyz
Screenshot of 1airdrop.org
1airdrop.org
6 VTActiveaave
Screenshot of 1airdrop.org
1airdrop.org
Screenshot of 7788.zorb.pro
7788.zorb.pro
6 VTUnknown
Screenshot of 7788.zorb.pro
7788.zorb.pro
Screenshot of 885625-ledger.com
885625-ledger.com
6 VTActiveledger
Screenshot of 885625-ledger.com
885625-ledger.com
Screenshot of 8eth.eu
8eth.eu
6 VTUnknowncoinbase
Screenshot of 8eth.eu
8eth.eu
a.chainlink.gu.cc
6 VTActive
Screenshot of accountrecover-google.com
accountrecover-google.com
6 VTActiveGoogle
Screenshot of accountrecover-google.com
accountrecover-google.com
Screenshot of adixairdrop.xyz
adixairdrop.xyz
6 VTUnknownacross
Screenshot of adixairdrop.xyz
adixairdrop.xyz
Screenshot of ai-okx.asia
ai-okx.asia
6 VTUnknownOKX
Screenshot of ai-okx.asia
ai-okx.asia
Screenshot of aiai-constellation.com
aiai-constellation.com
6 VTActiveAirdrop Scam
Screenshot of aiai-constellation.com
aiai-constellation.com
Screenshot of airdrop-boundless.app
airdrop-boundless.app
6 VTActiveWallet Connect Abuse
Screenshot of airdrop-boundless.app
airdrop-boundless.app
airdrop-eapes.com
6 VTUnknownSolana
Screenshot of airdrop-ether.com
airdrop-ether.com
6 VTUnknownWallet Connect AbuseFacebook
Screenshot of airdrop-ether.com
airdrop-ether.com
Screenshot of airdrop-finder.cyou
airdrop-finder.cyou
6 VTActive
Screenshot of airdrop-finder.cyou
airdrop-finder.cyou
Screenshot of airdrop-gaib.live
airdrop-gaib.live
6 VTUnknownAngel Drainerdiscord
Screenshot of airdrop-gaib.live
airdrop-gaib.live
Screenshot of airdrop-kabuto.xyz
airdrop-kabuto.xyz
6 VTUnknownAngel Drainer
Screenshot of airdrop-kabuto.xyz
airdrop-kabuto.xyz
Screenshot of airdrop-mantle.xyz
airdrop-mantle.xyz
6 VTUnknown["mantle"]
Screenshot of airdrop-mantle.xyz
airdrop-mantle.xyz
Screenshot of airdrop-origindefi.xyz
airdrop-origindefi.xyz
6 VTUnknown
Screenshot of airdrop-origindefi.xyz
airdrop-origindefi.xyz
Screenshot of airdrop.alliancegames.xyz
airdrop.alliancegames.xyz
6 VTActiveSui
Screenshot of airdrop.alliancegames.xyz
airdrop.alliancegames.xyz
Screenshot of airdrop.unifal.network
airdrop.unifal.network
6 VTUnknownAngel Drainermetamask
Screenshot of airdrop.unifal.network
airdrop.unifal.network
Screenshot of airdrop.wumpuscorp.xyz
airdrop.wumpuscorp.xyz
6 VTUnknown
Screenshot of airdrop.wumpuscorp.xyz
airdrop.wumpuscorp.xyz
Screenshot of airdrop2026.top
airdrop2026.top
6 VTUnknownfacebook
Screenshot of airdrop2026.top
airdrop2026.top
Screenshot of airdropalert.art
airdropalert.art
6 VTUnknown
Screenshot of airdropalert.art
airdropalert.art
Screenshot of airdropcrypto.net
airdropcrypto.net
6 VTActiveadobe
Screenshot of airdropcrypto.net
airdropcrypto.net
Screenshot of airdropdashx.com
airdropdashx.com
6 VTActive
Screenshot of airdropdashx.com
airdropdashx.com
Screenshot of airdrophubs.org
airdrophubs.org
6 VTUnknownethereum
Screenshot of airdrophubs.org
airdrophubs.org
Screenshot of airdrops.discordwallets.com
airdrops.discordwallets.com
6 VTActive
Screenshot of airdrops.discordwallets.com
airdrops.discordwallets.com
Screenshot of airdropseekprotocol.xyz
airdropseekprotocol.xyz
6 VTUnknownSolana Drainerphantom
Screenshot of airdropseekprotocol.xyz
airdropseekprotocol.xyz
Screenshot of airdropsgtiapro.xyz
airdropsgtiapro.xyz
6 VTActivegodaddy
Screenshot of airdropsgtiapro.xyz
airdropsgtiapro.xyz
Screenshot of airdrpalert.lol
airdrpalert.lol
6 VTUnknownAngel Drainercoinbase
Screenshot of airdrpalert.lol
airdrpalert.lol
Screenshot of alignedlayer.help
alignedlayer.help
6 VTActive
Screenshot of alignedlayer.help
alignedlayer.help
Screenshot of alignedpresale.xyz
alignedpresale.xyz
6 VTUnknownacross
Screenshot of alignedpresale.xyz
alignedpresale.xyz
Screenshot of allocation-meteora.com
allocation-meteora.com
6 VTUnknownAngel Drainer
Screenshot of allocation-meteora.com
allocation-meteora.com
Screenshot of allocation-pippin.com
allocation-pippin.com
6 VTUnknown
Screenshot of allocation-pippin.com
allocation-pippin.com
Screenshot of aml-point.com
aml-point.com
6 VTUnknown
Screenshot of aml-point.com
aml-point.com
Screenshot of app-hyperliquiid.xyz
app-hyperliquiid.xyz
6 VTUnknownmetamask
Screenshot of app-hyperliquiid.xyz
app-hyperliquiid.xyz
Screenshot of app.meteorafi.com
app.meteorafi.com
6 VTUnknownSolana DrainerSolana
Screenshot of app.meteorafi.com
app.meteorafi.com
appnodesrefix.pages.dev
6 VTUnknown
Screenshot of aprioriairdrop.xyz
aprioriairdrop.xyz
6 VTUnknown
Screenshot of aprioriairdrop.xyz
aprioriairdrop.xyz
Screenshot of archnetworkairdrop.xyz
archnetworkairdrop.xyz
6 VTUnknown
Screenshot of archnetworkairdrop.xyz
archnetworkairdrop.xyz
Screenshot of arrland.live
arrland.live
6 VTUnknowncoinbase
Screenshot of arrland.live
arrland.live
Screenshot of artrades.live
artrades.live
6 VTActive
Screenshot of artrades.live
artrades.live
Screenshot of aster-drops.netlify.app
aster-drops.netlify.app
6 VTUnknownWallet Connect Abusediscord
Screenshot of aster-drops.netlify.app
aster-drops.netlify.app
« Prev 24 25 26 27 28 29 30 Next » Page 27 of 63

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust