Search tracked domains and review stored evidence, detections, and the latest observed availability.

196,307
Total Tracked
196,307
VT Detected
88,838
Last Seen Active
98,858
Unavailable at Last Check
0
VT Pending
Fake Airdrop Scam
HIGH THREAT

Understanding the Fake Airdrop Scam: Protecting Your Digital Assets

PhishDestroy currently associates 6,268 tracked domain reports with Fake Airdrop Scam. Review stored detections, evidence, and the latest observed availability below.

6,268
Domains Detected
HIGH
Threat Level

How This Attack Works

Fake Airdrop Scams exploit the burgeoning interest in cryptocurrencies by deceiving users into believing they are receiving free tokens.

STEP 1
Bait with Free Tokens
Scammers create fake websites promising free cryptocurrency airdrops to lure victims.
STEP 2
Collect Personal Data
Users are prompted to enter personal details or connect their crypto wallets to receive the airdrop.
STEP 3
Execute a Scam Transaction
Once connected, scammers initiate unauthorized transactions or steal sensitive data.
STEP 4
Disappear with the Loot
Scammers transfer stolen funds to anonymous accounts, disappearing without a trace.

Technical Analysis

Fake Airdrop Scams often involve sophisticated phishing techniques. Attackers use clone websites that mimic legitimate airdrop events. These sites are built using JavaScript and HTML to create convincing interfaces. Scammers may employ smart contract functions such as 'transfer' and 'approve' to gain unauthorized access to victims' wallets. Additionally, phishing emails and social media posts are used to drive traffic to these malicious websites. Infrastructure often involves domains registered through top registrars like NICENIC INTERNATIONAL GROUP CO., LIMITED, ensuring anonymity and making it challenging to track the perpetrators.

Real Cases

The Ethereum Classic Airdrop Scam (2024)
$3.5 million stolen
Scammers created a fake Ethereum Classic airdrop event, stealing millions from unsuspecting users.
Fake Uniswap Airdrop (2023)
$2 million stolen
A bogus Uniswap token airdrop fooled users into relinquishing control of their wallets.
The Polkadot Giveaway Fraud (2024)
$1 million stolen
A fake Polkadot giveaway led to substantial financial losses for crypto enthusiasts.

How to Detect

Unsolicited messages about free airdrops
Domains with unusual TLDs like .xyz and .top
Requests for private keys or wallet access
Poorly designed websites with typos
Urgent calls-to-action pressuring immediate response

How to Protect Yourself

1 Verify airdrop legitimacy through official channels
2 Avoid clicking on unsolicited links
3 Use hardware wallets for extra security
4 Enable two-factor authentication
5 Regularly update software and security protocols

Frequently Asked Questions

What is Fake Airdrop Scam?
Fake Airdrop Scams deceive users by offering free cryptocurrency tokens, leading them to fraudulent sites to steal personal and financial information.
How much money has been stolen through Fake Airdrop Scam?
Millions of dollars have been stolen, with significant cases like the Ethereum Classic Airdrop Scam costing $3.5 million in 2024.
How do I protect myself from Fake Airdrop Scam?
Verify all airdrop offers through official sources, avoid clicking unknown links, and secure your crypto assets with hardware wallets and 2FA.
What should I do if I'm a victim of Fake Airdrop Scam?
Immediately report the incident to your local authorities and contact your bank or wallet provider to secure your accounts and limit further losses.
Data sourced from PhishDestroy threat intelligence database — 6,268 domains tracked for this threat type
Airdrop Scam — Threat Intelligence Kit High Threat
6,268
Domains
2,134
Alive
3,119
Taken Down
7.2
Avg VT
34%
Alive Rate
97.1%
Detected
Since Mar 2024 3,512 domains with VT ≥ 5
Fake Airdrop Scam 6,268 domains
Screenshot of superfomrfoundation.org
superfomrfoundation.org
15 VTActivediscord
Screenshot of superfomrfoundation.org
superfomrfoundation.org
Screenshot of support-coinbase-five.vercel.app
support-coinbase-five.vercel.app
15 VTActiveCoinbase
Screenshot of support-coinbase-five.vercel.app
support-coinbase-five.vercel.app
support250.agency-partner-manage.com
15 VTActiveCloudflare
Screenshot of supreformfoundation.org
supreformfoundation.org
15 VTActivediscord
Screenshot of supreformfoundation.org
supreformfoundation.org
Screenshot of t-mobile.aorkd.cc
t-mobile.aorkd.cc
15 VTUnknownt-mobile
Screenshot of t-mobile.aorkd.cc
t-mobile.aorkd.cc
Screenshot of t-mobile.bfsak.cc
t-mobile.bfsak.cc
15 VTUnknownt-mobile
Screenshot of t-mobile.bfsak.cc
t-mobile.bfsak.cc
Screenshot of t-mobile.foigk.cc
t-mobile.foigk.cc
15 VTUnknownt-mobile
Screenshot of t-mobile.foigk.cc
t-mobile.foigk.cc
Screenshot of t-mobile.qwxoz.cc
t-mobile.qwxoz.cc
15 VTUnknownt-mobile
Screenshot of t-mobile.qwxoz.cc
t-mobile.qwxoz.cc
Screenshot of tac.org.airdropsalert.life
tac.org.airdropsalert.life
15 VTUnknown
Screenshot of tac.org.airdropsalert.life
tac.org.airdropsalert.life
technoworks.com.pk
15 VTActiveAirdrop Scam
Screenshot of texitcointxc.org
texitcointxc.org
15 VTUnknownSolana Drainer1inch
Screenshot of texitcointxc.org
texitcointxc.org
thenexusdrop.com
15 VTActive
Screenshot of tiffany.rewards-nftiff.com
tiffany.rewards-nftiff.com
15 VTUnknown
Screenshot of tiffany.rewards-nftiff.com
tiffany.rewards-nftiff.com
toj6axodqx.coinbase666.com
15 VTActiveCoinbase
Screenshot of token2049.airdropsalert.life
token2049.airdropsalert.life
15 VTUnknown
Screenshot of token2049.airdropsalert.life
token2049.airdropsalert.life
Screenshot of tokencitrea.xyz
tokencitrea.xyz
15 VTActive
Screenshot of tokencitrea.xyz
tokencitrea.xyz
Screenshot of tokenpkocet.com.cn
tokenpkocet.com.cn
15 VTActive
Screenshot of tokenpkocet.com.cn
tokenpkocet.com.cn
Screenshot of turbos.airdropsalert.life
turbos.airdropsalert.life
15 VTUnknown
Screenshot of turbos.airdropsalert.life
turbos.airdropsalert.life
Screenshot of umbraproject.xyz
umbraproject.xyz
15 VTUnknown
Screenshot of umbraproject.xyz
umbraproject.xyz
Screenshot of umbraprotect.xyz
umbraprotect.xyz
15 VTActive
Screenshot of umbraprotect.xyz
umbraprotect.xyz
Screenshot of uni-distribution.com
uni-distribution.com
15 VTUnknownAngel DrainerUniswap
Screenshot of uni-distribution.com
uni-distribution.com
Screenshot of unified-mpc.amidoggy.xyz
unified-mpc.amidoggy.xyz
15 VTUnknownSolana
Screenshot of unified-mpc.amidoggy.xyz
unified-mpc.amidoggy.xyz
Screenshot of usdwon.com
usdwon.com
15 VTActivecoinbase
Screenshot of usdwon.com
usdwon.com
Screenshot of usor.digital
usor.digital
15 VTActiveSolana Draineracross
Screenshot of usor.digital
usor.digital
Screenshot of uxeesss3xi5lnoakip6vkvkex3rvotfqdclqwcvxyg5fj7mylxhq.g8way.io
uxeesss3xi5lnoakip6vkvkex3rvotfqdclqwcvxyg5fj7mylxhq.g8way.io
15 VTActive
Screenshot of uxeesss3xi5lnoakip6vkvkex3rvotfqdclqwcvxyg5fj7mylxhq.g8way.io
uxeesss3xi5lnoakip6vkvkex3rvotfqdclqwcvxyg5fj7mylxhq.g8way.io
Screenshot of v-vpass-jp.casting-sand.com
v-vpass-jp.casting-sand.com
15 VTUnknown
Screenshot of v-vpass-jp.casting-sand.com
v-vpass-jp.casting-sand.com
Screenshot of v-vpass-jp.jzny1681.com
v-vpass-jp.jzny1681.com
15 VTUnknown
Screenshot of v-vpass-jp.jzny1681.com
v-vpass-jp.jzny1681.com
Screenshot of v-vpass-jp.wxzxct.com
v-vpass-jp.wxzxct.com
15 VTUnknown
Screenshot of v-vpass-jp.wxzxct.com
v-vpass-jp.wxzxct.com
virl-rewards.com
15 VTActive
Screenshot of vpass-jp.boyanzhixing.com
vpass-jp.boyanzhixing.com
15 VTUnknown
Screenshot of vpass-jp.boyanzhixing.com
vpass-jp.boyanzhixing.com
Screenshot of walrus.airdropsalert.life
walrus.airdropsalert.life
15 VTUnknown
Screenshot of walrus.airdropsalert.life
walrus.airdropsalert.life
Screenshot of waronsol.biz
waronsol.biz
15 VTActive
Screenshot of waronsol.biz
waronsol.biz
Screenshot of waronsol.club
waronsol.club
15 VTUnknown
Screenshot of waronsol.club
waronsol.club
Screenshot of web-whataspp.com
web-whataspp.com
15 VTActivegeneric
Screenshot of web-whataspp.com
web-whataspp.com
Screenshot of web3.ouchyi.bid
web3.ouchyi.bid
15 VTUnknownokx
Screenshot of web3.ouchyi.bid
web3.ouchyi.bid
Screenshot of wlficoin.life
wlficoin.life
15 VTActiveSolana Drainerrevolut
Screenshot of wlficoin.life
wlficoin.life
woniuobi.com
15 VTActiveokx
Screenshot of worldllbertyfinancial.com
worldllbertyfinancial.com
15 VTActive
Screenshot of worldllbertyfinancial.com
worldllbertyfinancial.com
Screenshot of ww25.287105-coinbase.com
ww25.287105-coinbase.com
15 VTUnknownCoinbase
Screenshot of ww25.287105-coinbase.com
ww25.287105-coinbase.com
Screenshot of ww25.340445-coinbase.com
ww25.340445-coinbase.com
15 VTUnknownCoinbase
Screenshot of ww25.340445-coinbase.com
ww25.340445-coinbase.com
Screenshot of ww25.client.876234-coinbase.com
ww25.client.876234-coinbase.com
15 VTUnknownCoinbase
Screenshot of ww25.client.876234-coinbase.com
ww25.client.876234-coinbase.com
Screenshot of ww25.fclzfdev.coinbase-pportal.com
ww25.fclzfdev.coinbase-pportal.com
15 VTActiveCoinbase
Screenshot of ww25.fclzfdev.coinbase-pportal.com
ww25.fclzfdev.coinbase-pportal.com
Screenshot of ww25.proxy.coinbase-newpassword.com
ww25.proxy.coinbase-newpassword.com
15 VTUnknownCoinbase
Screenshot of ww25.proxy.coinbase-newpassword.com
ww25.proxy.coinbase-newpassword.com
Screenshot of ww25.ticket-177269-coinbase.com
ww25.ticket-177269-coinbase.com
15 VTUnknownCoinbase
Screenshot of ww25.ticket-177269-coinbase.com
ww25.ticket-177269-coinbase.com
Screenshot of www3-vpass-jp.polytech-plastics.com
www3-vpass-jp.polytech-plastics.com
15 VTUnknown
Screenshot of www3-vpass-jp.polytech-plastics.com
www3-vpass-jp.polytech-plastics.com
Screenshot of www3-vpass.qdlxgl.com
www3-vpass.qdlxgl.com
15 VTActive
Screenshot of www3-vpass.qdlxgl.com
www3-vpass.qdlxgl.com
Screenshot of www3-vpass.wzjnzdm.com
www3-vpass.wzjnzdm.com
15 VTActive
Screenshot of www3-vpass.wzjnzdm.com
www3-vpass.wzjnzdm.com
Screenshot of wwwzhgwexpouy.info
wwwzhgwexpouy.info
15 VTActiveOKX
Screenshot of wwwzhgwexpouy.info
wwwzhgwexpouy.info
Screenshot of xrpflareclaims.xyz
xrpflareclaims.xyz
15 VTUnknownflarenetwork
Screenshot of xrpflareclaims.xyz
xrpflareclaims.xyz
Screenshot of zlp.airdropsalert.life
zlp.airdropsalert.life
15 VTUnknown
Screenshot of zlp.airdropsalert.life
zlp.airdropsalert.life
Screenshot of 1drop.click
1drop.click
14 VTActiveEthereum
Screenshot of 1drop.click
1drop.click
Screenshot of 1inch.app-airdropalert.sbs
1inch.app-airdropalert.sbs
14 VTUnknownAngel Drainer1inch
Screenshot of 1inch.app-airdropalert.sbs
1inch.app-airdropalert.sbs
Screenshot of 2base.cfd
2base.cfd
14 VTActive
Screenshot of 2base.cfd
2base.cfd
Screenshot of 2vulptfpoov5djahqlskqza5v3itx3k2byj7zir5t3m3p2ann46a.g8way.io
2vulptfpoov5djahqlskqza5v3itx3k2byj7zir5t3m3p2ann46a.g8way.io
14 VTActive
Screenshot of 2vulptfpoov5djahqlskqza5v3itx3k2byj7zir5t3m3p2ann46a.g8way.io
2vulptfpoov5djahqlskqza5v3itx3k2byj7zir5t3m3p2ann46a.g8way.io
Screenshot of account.identifications-coinbase.com
account.identifications-coinbase.com
14 VTActiveCoinbase
Screenshot of account.identifications-coinbase.com
account.identifications-coinbase.com
Screenshot of adminapi.jiuzhouw.net
adminapi.jiuzhouw.net
14 VTActiveamazon
Screenshot of adminapi.jiuzhouw.net
adminapi.jiuzhouw.net
adtracking06.agency-partner-platform.com
14 VTActive["google"]
airbnb-clone-g54voyuwx-huucanh2011.vercel.app
14 VTActiveairbnb
Screenshot of airdapp.click
airdapp.click
14 VTActivebinance
Screenshot of airdapp.click
airdapp.click
Screenshot of airdop-hypeliquid.com
airdop-hypeliquid.com
14 VTUnknownAngel Drainergenericcrypto
Screenshot of airdop-hypeliquid.com
airdop-hypeliquid.com
Screenshot of airdrop-babylon.live
airdrop-babylon.live
14 VTActiverevolut
Screenshot of airdrop-babylon.live
airdrop-babylon.live
Screenshot of airdrop-bitgetwallet.live
airdrop-bitgetwallet.live
14 VTActivebitget
Screenshot of airdrop-bitgetwallet.live
airdrop-bitgetwallet.live
Screenshot of airdrop-blackwing.live
airdrop-blackwing.live
14 VTActive
Screenshot of airdrop-blackwing.live
airdrop-blackwing.live
Screenshot of airdrop-boundless.live
airdrop-boundless.live
14 VTActive
Screenshot of airdrop-boundless.live
airdrop-boundless.live
Screenshot of airdrop-defiapp.live
airdrop-defiapp.live
14 VTActive
Screenshot of airdrop-defiapp.live
airdrop-defiapp.live
Screenshot of airdrop-derive.live
airdrop-derive.live
14 VTActive
Screenshot of airdrop-derive.live
airdrop-derive.live
Screenshot of airdrop-espresso.bet
airdrop-espresso.bet
14 VTUnknownAngel Drainerfoundation
Screenshot of airdrop-espresso.bet
airdrop-espresso.bet
Screenshot of airdrop-fluence.live
airdrop-fluence.live
14 VTActivebase
Screenshot of airdrop-fluence.live
airdrop-fluence.live
Screenshot of airdrop-gaib.com
airdrop-gaib.com
14 VTUnknownAngel Drainerdiscord
Screenshot of airdrop-gaib.com
airdrop-gaib.com
Screenshot of airdrop-grvt.live
airdrop-grvt.live
14 VTActive
Screenshot of airdrop-grvt.live
airdrop-grvt.live
Screenshot of airdrop-haven1.live
airdrop-haven1.live
14 VTActiverevolut
Screenshot of airdrop-haven1.live
airdrop-haven1.live
Screenshot of airdrop-layeredge.live
airdrop-layeredge.live
14 VTActive
Screenshot of airdrop-layeredge.live
airdrop-layeredge.live
Screenshot of airdrop-sprite.com
airdrop-sprite.com
14 VTActivemetamask
Screenshot of airdrop-sprite.com
airdrop-sprite.com
Screenshot of airdrop-storyprotocol.live
airdrop-storyprotocol.live
14 VTActive
Screenshot of airdrop-storyprotocol.live
airdrop-storyprotocol.live
Screenshot of airdrop-trustwallet.xyz
airdrop-trustwallet.xyz
14 VTUnknownTrustWallet
Screenshot of airdrop-trustwallet.xyz
airdrop-trustwallet.xyz
Screenshot of airdrop.laffala.app
airdrop.laffala.app
14 VTActiveSui
Screenshot of airdrop.laffala.app
airdrop.laffala.app
Screenshot of airdroppulse.app
airdroppulse.app
14 VTActivegenericcrypto
Screenshot of airdroppulse.app
airdroppulse.app
airdrops-nibirucom.pages.dev
14 VTActive
Screenshot of airdropsalerts.app
airdropsalerts.app
14 VTUnknown
Screenshot of airdropsalerts.app
airdropsalerts.app
airdroq.top
14 VTActive1inch
Screenshot of amlc-crypto.com
amlc-crypto.com
14 VTActiveCrypto.com
Screenshot of amlc-crypto.com
amlc-crypto.com
Screenshot of amlradar.info
amlradar.info
14 VTActive
Screenshot of amlradar.info
amlradar.info
Screenshot of aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com
aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com
14 VTActive
Screenshot of aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com
aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com
app-astrovault.pages.dev
14 VTActive
Screenshot of app-backpack.exchange
app-backpack.exchange
14 VTUnknown["backpack"]
Screenshot of app-backpack.exchange
app-backpack.exchange
Screenshot of app.coinbasex.info
app.coinbasex.info
14 VTUnknownCoinbase
Screenshot of app.coinbasex.info
app.coinbasex.info
Screenshot of app.setus.zone
app.setus.zone
14 VTUnknown
Screenshot of app.setus.zone
app.setus.zone
app.soltscisce.finance
14 VTUnknown
Screenshot of arihchain.xyz
arihchain.xyz
14 VTUnknown
Screenshot of arihchain.xyz
arihchain.xyz
Screenshot of assethelp.co
assethelp.co
14 VTActive
Screenshot of assethelp.co
assethelp.co
Screenshot of astartmdv1.com
astartmdv1.com
14 VTActive
Screenshot of astartmdv1.com
astartmdv1.com
Screenshot of aster-governance.com
aster-governance.com
14 VTUnknownWallet Connect Abuse
Screenshot of aster-governance.com
aster-governance.com
Screenshot of asterdecks.com
asterdecks.com
14 VTActivegenericcrypto
Screenshot of asterdecks.com
asterdecks.com
Screenshot of asterdex-transfer.app
asterdex-transfer.app
14 VTUnknownAngel Drainerbnb chain
Screenshot of asterdex-transfer.app
asterdex-transfer.app
Screenshot of asterdex.sale
asterdex.sale
14 VTUnknown
Screenshot of asterdex.sale
asterdex.sale
Screenshot of astserdex.app
astserdex.app
14 VTUnknowngenericcrypto
Screenshot of astserdex.app
astserdex.app
Screenshot of aterapanel.com
aterapanel.com
14 VTActive
Screenshot of aterapanel.com
aterapanel.com
Screenshot of ateraslog.com
ateraslog.com
14 VTActive
Screenshot of ateraslog.com
ateraslog.com
Screenshot of att.mflgn.cc
att.mflgn.cc
14 VTUnknown
Screenshot of att.mflgn.cc
att.mflgn.cc
Screenshot of audius.us
audius.us
14 VTActivesolana
Screenshot of audius.us
audius.us
« Prev 4 5 6 7 8 9 10 Next » Page 7 of 63

Threat Response Pipeline

How every domain in this hub is verified and how confirmed threats are neutralized. Full pipeline visualization →

Threat Intelligence Checks— every domain is scanned & cross-checked against:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency ReportCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Security FiltersQuad9 · AdGuard · CleanBrowsingWeb-CheckFull surface scan
Global Vendor Sync— confirmed detections are pushed to 29 partners:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSiteReviewAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftTakedown APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.ReportHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust