# airdrop-nobodysausage.club — SUSPICIOUS

> Stay safe from crypto theft. Avoid airdrop-nobodysausage.club, a known crypto drainer. Do not interact or enter personal info on this suspicious site.

## Summary
PhishDestroy identifies airdrop-nobodysausage.club as a medium-risk crypto drainer domain designed to steal cryptocurrency assets from unsuspecting users. The site, titled "Nobody Sausage | Join the Club," attempts to lure victims with fraudulent airdrop offers. Its operations focus on tricking users into revealing private keys or wallet access information, putting digital assets at significant risk.

The domain was registered through Eranet International Limited on September 21, 2025, and resolves to IP address 188.114.96.3. It currently appears on three security blocklists, and VirusTotal flags it by 4 out of 95 security vendors, indicating moderate suspicion. This infrastructure is commonly associated with illicit crypto schemes, leveraging domain anonymity and hosting services to evade detection.

As of now, airdrop-nobodysausage.club is offline, reducing immediate risk, but users are strongly advised to remain vigilant against similar phishing sites. Avoid clicking on unknown airdrop links or providing wallet credentials. PhishDestroy recommends verifying domain legitimacy through trusted sources and utilizing robust security measures such as hardware wallets and two-factor authentication.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Scam type: Airdrop Scam
- Page title: Nobody Sausage | Join the Club

## Domain Intelligence
- Registered: 2025-09-21 18:15:23
- Expires: 2026-09-21 18:15:23
- Registrar: Eranet International Limited
- Country: CN
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: donna.ns.cloudflare.com pranab.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["CRDF", "Ermes", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0199fb8e-06ba-74cd-8e37-29db717165be.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/d6d2a503-1f8c-4b35-a115-456b4af3ee63
- PhishDestroy: https://phishdestroy.io/domain/airdrop-nobodysausage.club/
- LLM endpoint: https://phishdestroy.io/domain/airdrop-nobodysausage.club/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdrop-nobodysausage.club/
Last updated: 2026-03-19