# PhishDestroy domain threat record: airdrop-cryptocurrency.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/airdrop-cryptocurrency.com/
Machine-readable companion: https://phishdestroy.io/domain/airdrop-cryptocurrency.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 13:14:13 UTC
- Last availability or vendor check: 2026-10-23 10:00:27 UTC
- Stored record updated: 2026-10-23 18:20:29 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: arbitrum

## Stored infrastructure

- Observed IP address: 38.247.162.145
- Registrar in stored WHOIS data: MAT BAO CORPORATION
- Last stored HTTP status: 200
- Registration date (registry RDAP, airdrop-cryptocurrency.com): 2026-10-20 07:49:46 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a163be-3a56-7649-bb71-a099a4af1743/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/airdrop-cryptocurrency.com
- Certificate Transparency search: https://crt.sh/?q=%25.airdrop-cryptocurrency.com
- Web Archive lookup: https://web.archive.org/web/*/https://airdrop-cryptocurrency.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s automated intake classified the site as malicious because it pretends to be a cryptocurrency news and airdrop portal that promises USDT "mysterious gifts" and daily draws. The recorded page title was "Crypto Daily — 加密情报终端", matching a news‑style façade. The domain was first seen by PhishDestroy on 2026-10-22 and returned an HTTP 200 response at that time.

How the scam works
Airdrop scams lure victims by advertising free cryptocurrency tokens, often claiming limited‑time offers or exclusive draws. Victims are typically asked to connect a wallet or provide private keys, enabling attackers to steal funds or harvest credentials.

Evidence
VirusTotal scanned the domain on 2026-10-22 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked the same day and did not flag the site. URLScan recorded a malicious engine tag with a score of 100, though its overall verdict was non‑malicious. External blocklists MetaMask and SEAL listed the domain (2 entries) and PhishDestroy’s internal blocklist also contained it. OTX recorded four pulses referencing the domain as of 2026-10-22.

Infrastructure
The domain was registered on 2026-10-20 through MAT BAO CORPORATION. The recorded IP address was 38.247.162.145, which the registration data associated with 1515 ROUNDTABLE DR PROPERTY, LLC in the United States. TLS was issued by Let’s Encrypt / YR2 on 2026-10-20, valid until 2027-01-18, using AES‑256‑GCM. Open ports observed were 22 (SSH) and 80 (HTTP), and the page loaded a third‑party script from the jsDelivr CDN.

What to do
Users should avoid entering wallet credentials or personal data on this site; if a wallet was connected, revoke any approvals and create a new wallet with a fresh seed phrase. Defenders should block the domain, monitor DNS queries for it, and review logs for connections to the recorded IP address. Adding the domain to web‑filtering rules and internal blocklists will help prevent future exposure.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a163be-3a56-7649-bb71-a099a4af1743/
Cloudflare Radar report: https://radar.cloudflare.com/scan/70c9f97f-7e87-4343-b339-2b76bea3b7d3
URLQuery report: https://urlquery.net/report/9f317832-5c46-4141-b650-0c7f8601f8fb
Stored capture screenshot: https://i.ibb.co/0V9LT5xg/d79b834a5991.png
Cloudflare Radar screenshot (2026-10-22T13:48:45Z): https://screenshots.phishdestroy.io/cf/70c9f97f-7e87-4343-b339-2b76bea3b7d3.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/9f317832-5c46-4141-b650-0c7f8601f8fb.png
URLScan screenshot (2026-10-22T13:24:58Z): https://screenshots.phishdestroy.io/us/01a163c9-2994-721a-9fbc-fae3ef033a8c.png
URLScan capture report: https://urlscan.io/result/01a163c9-2994-721a-9fbc-fae3ef033a8c/
VirusTotal report: https://www.virustotal.com/gui/domain/airdrop-cryptocurrency.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=airdrop-cryptocurrency.com
Revoke token approvals: https://revoke.cash/
Report crypto fraud (Chainabuse): https://www.chainabuse.com/report
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 14:23:18 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/0V9LT5xg/d79b834a5991.png
  Captured: 2026-10-22 13:14:13 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a163be-3a56-7649-bb71-a099a4af1743.png
  Captured: 2026-10-22 13:14:13 UTC
  Source report: https://urlscan.io/result/01a163be-3a56-7649-bb71-a099a4af1743/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/70c9f97f-7e87-4343-b339-2b76bea3b7d3.png
  Captured: 2026-10-22 13:48:45 UTC
  Source report: https://radar.cloudflare.com/scan/70c9f97f-7e87-4343-b339-2b76bea3b7d3
  SHA-256: c10d673267e7ee048858b0952ebde81d57f8255087f00ddf7c1a75cdb9c374f2
- URLQuery: https://screenshots.phishdestroy.io/uq/9f317832-5c46-4141-b650-0c7f8601f8fb.png
  Source report: https://urlquery.net/report/9f317832-5c46-4141-b650-0c7f8601f8fb
  SHA-256: 0f7cf1ab5d0bb246d9243719173568752c94f3342a5fbf398d1336f9063d93b5
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a163c9-2994-721a-9fbc-fae3ef033a8c.png
  Captured: 2026-10-22 13:24:58 UTC
  Source report: https://urlscan.io/result/01a163c9-2994-721a-9fbc-fae3ef033a8c/
  SHA-256: 56bee4c599089013d49536e7339bb3962bd1cbee2e2192fdaa02a56076e197ef

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T13:50:34Z",
        "uuid": "01a163be-3a56-7649-bb71-a099a4af1743",
        "scanned_at": "2026-10-22T13:13:09Z",
        "final_url": "https://airdrop-cryptocurrency.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://airdrop-cryptocurrency.com/",
                "from": "http://airdrop-cryptocurrency.com/",
                "status": 307
            },
            {
                "to": "http://airdrop-cryptocurrency.com/",
                "from": "https://airdrop-cryptocurrency.com/",
                "status": 307
            },
            {
                "to": "https://airdrop-cryptocurrency.com/",
                "from": "http://airdrop-cryptocurrency.com/",
                "status": 301
            }
        ],
        "ip": "38.247.162.145",
        "domains": [
            "cdn.jsdelivr.net"
        ],
        "ips": [
            "104.17.207.5",
            "38.247.162.145"
        ],
        "asns": [
            "13335",
            "393398"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "14e8a44a2dbd31b2cf209ceeb0bceb2aa09701467f7edea5c58e01821239e646",
        "script_hashes": [
            "7d31ee17c95156539eb53441c44d221979d2ed48da518a1129b461f2842214c5",
            "7713351d8fe023d5017649eb23f323c567531e170cab74780f6193e229594c90",
            "a5e9d2dbdd5cf3ab8beef44e8feef4c17f4f324734512544081021b17ae123e8"
        ],
        "globals": [
            "__TRUST_NFT_REDIRECT__",
            "CD_LANG_META",
            "CD_LOCALES",
            "CD_EXTRA",
            "__cdRefreshLangMenus",
            "__cdRefreshI18n",
            "__cdGiftCountdown"
        ],
        "tls": {
            "san": [
                "airdrop-cryptocurrency.com",
                "www.airdrop-cryptocurrency.com"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "YR2",
            "subject": "airdrop-cryptocurrency.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-18T10:21:23Z",
            "valid_from": "2026-10-20T10:21:24Z"
        },
        "domain_age_days": 1,
        "apex_age_days": 1,
        "tls_age_days": 2,
        "tls_valid_days": 89,
        "requests": 26,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "nginx",
            "content-type": "text/html",
            "strict-transport-security": "max-age=31536000"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T13:50:35Z",
        "uuid": "70c9f97f-7e87-4343-b339-2b76bea3b7d3",
        "scanned_at": "2026-10-22T13:48:45Z",
        "final_url": "https://airdrop-cryptocurrency.com/",
        "status": 200,
        "history": [
            {
                "url": "https://airdrop-cryptocurrency.com/",
                "status": 200
            }
        ],
        "dom_hash": "a412ebf8d99341aa52f0ef5e955be1f2b5b874c2f02096a62f4e81ca49e16a69",
        "doc_hash": "14e8a44a2dbd31b2cf209ceeb0bceb2aa09701467f7edea5c58e01821239e646",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Newly Seen Domains",
            "Security Risks",
            "New Domains"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "airdrop-cryptocurrency.com",
                "type": "A",
                "value": "38.247.162.145"
            }
        ],
        "dnssec_valid": false,
        "ip": "38.247.162.145",
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "created": "2026-10-20T07:49:46Z",
            "updated": "2026-10-20T07:49:46Z",
            "expires": "2027-10-20T07:49:46Z",
            "nameservers": [
                "ns1.jtdnsv1.com",
                "ns2.jtdnsv1.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T14:22:12Z",
        "analysis_at": "2026-10-22T13:25:17Z",
        "stats": {
            "timeout": 0,
            "harmless": 54,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 38
        },
        "reputation": 0,
        "registrar": "MAT BAO CORPORATION",
        "created": "2026-10-20T07:49:46Z",
        "expires": "2027-10-20T07:49:46Z",
        "updated": "2026-10-20T07:49:46Z",
        "first_seen": "2026-10-20T11:27:40Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.jtdnsv1.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.jtdnsv1.com"
            },
            {
                "ttl": 600,
                "type": "SOA",
                "rname": "admin.jtdnsv1.com",
                "value": "ns1.jtdnsv1.com"
            },
            {
                "ttl": 600,
                "type": "A",
                "value": "38.247.162.145"
            }
        ],
        "dns_at": "2026-10-22T13:30:46Z",
        "jarm": "3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763",
        "cert": {
            "san": [
                "airdrop-cryptocurrency.com",
                "www.airdrop-cryptocurrency.com"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "55f1581c60fc37bbb1ab6be934feaed8a9d",
            "sha256": "c2747328cc372c5eedc21331266320253892dec8fd167dcd88896b5f2f425bd5",
            "subject": "airdrop-cryptocurrency.com",
            "valid_to": "2027-01-18T10:21:23Z",
            "valid_from": "2026-10-20T10:21:24Z"
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "registrar_iana_id": "1586",
            "registrar_url": "http://www.matbao.net",
            "created": "2026-10-20T07:49:46Z",
            "updated": "2026-10-20T07:49:46Z",
            "expires": "2027-10-20T07:49:46Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.jtdnsv1.com",
                "ns2.jtdnsv1.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "last changed": "2026-10-20T07:49:46Z",
                "registration": "2026-10-20T07:49:46Z",
                "registrar expiration": "2027-10-20T07:49:46Z",
                "last update of RDAP database": "2026-10-20T11:35:05Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T13:50:59Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "airdrop-cryptocurrency.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-22T13:17:47Z",
            "first": "2018-08-05T08:22:48Z",
            "changes": 1,
            "days_archived": 2,
            "scans_per_day": 0,
            "avg_page_bytes": 17374
        },
        "social_tags": {
            "title": "Crypto Daily — 加密情报终端",
            "ogType": "website",
            "ogImage": "images/crypto-gift.webp",
            "ogTitle": "Crypto Daily — 加密情报终端",
            "themeColor": "#101214",
            "description": "限量加密空投，发现当前可参与的加密奖励与限时活动。",
            "ogDescription": "限量加密空投，发现当前可参与的加密奖励与限时活动。"
        },
        "trackers": {
            "requests": 18,
            "trackers": [
                {
                    "name": "jsDelivr",
                    "company": "jsDelivr",
                    "category": "Hosting",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4"
            ],
            "third_party_scripts": 1
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 396,
                "tls": 122,
                "wait": 235,
                "connect": 116,
                "download": 120
            },
            "response_ms": 989
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                22,
                80
            ]
        },
        "carbon": {
            "bytes": 79251,
            "co2_grams": 0.0029,
            "cleaner_than": 27
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "177.2.31.163",
                    "host": "ns2.jtdnsv1.com"
                },
                {
                    "ip": "154.86.21.162",
                    "host": "ns1.jtdnsv1.com"
                }
            ],
            "zone": "airdrop-cryptocurrency.com"
        },
        "location": {
            "ip": "38.247.162.145",
            "asn": "393398",
            "org": "1515 ROUNDTABLE DR PROPERTY, LLC",
            "city": "Irvine",
            "country": "US"
        },
        "dns": {
            "A": [
                "38.247.162.145"
            ],
            "NS": [
                "ns1.jtdnsv1.com",
                "ns2.jtdnsv1.com"
            ],
            "SOA": "{\"nsname\": \"ns1.jtdnsv1.com\", \"hostmaster\": \"admin.jtdnsv1.com\", \"serial\": 1792495065, \"refresh\": 3600, \"retry\": 300, \"expire\": 1209600, \"minttl\": 1800}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "38.247.162.145",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://airdrop-cryptocurrency.com"
            ]
        },
        "linked_pages": {
            "internal_count": 3
        },
        "whois": {
            "registrar": "MAT BAO CORPORATION",
            "created": "2026-10-20T07:49:46Z",
            "updated": "2026-10-20T07:49:46Z",
            "expires": "2027-10-20T07:49:46Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.jtdnsv1.com",
                "ns2.jtdnsv1.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "nginx",
                "content-type": "text/html",
                "strict-transport-security": "max-age=31536000"
            }
        }
    }
}
```