# airdrop.fight.foundation — SUSPICIOUS

> PhishDestroy identifies airdrop.fight.foundation as a fake Airdrop Scam site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies airdrop.fight.foundation as an active brand impersonation threat masquerading as a cryptocurrency airdrop scam. This domain, registered through Gandi SAS on October 21, 2025, leverages the trust associated with Airdrop Scam to deceive users into engaging with fraudulent offers. The domain resolves to IP address 216.150.16.193 and utilizes a Let's Encrypt SSL certificate to appear legitimate. Despite its recent creation, the domain has not yet been flagged by VirusTotal, with 0 out of 95 security engines detecting malicious activity as of the latest analysis.  This domain exhibits high-risk indicators for phishing and fraudulent activities. The impersonation of a well-known airdrop service is a common tactic used by threat actors to lure victims into providing personal information, cryptocurrency wallet details, or downloading malware under the guise of receiving rewards. The use of Gandi SAS as the registrar and the deployment of a legitimate SSL certificate further enhance the domain's credibility, making it more likely for unsuspecting users to fall victim. The recent domain creation date and lack of detection on VirusTotal suggest this is a newly deployed threat, potentially still in its initial campaign phases.  Users who have visited airdrop.fight.foundation should take immediate action to protect their sensitive information. If any personal data, login credentials, or cryptocurrency wallet details were entered, users should change their passwords and revoke any permissions granted to the website. Additionally, users should scan their devices for malware using reputable antivirus software and monitor their financial accounts for unauthorized transactions. To prevent further exposure, users are advised to avoid interacting with this domain and report it to their cybersecurity teams or relevant authorities. PhishDestroy continues to monitor this domain and will update its status as new intelligence becomes available.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Airdrop Scam

## Domain Intelligence
- Registered: 2025-10-21 18:33:24
- Registrar: Gandi SAS
- IP: 216.150.16.193

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/711e35b6-d9e2-4df6-8342-8276c6bdb3e7
- PhishDestroy: https://phishdestroy.io/domain/airdrop.fight.foundation/
- LLM endpoint: https://phishdestroy.io/domain/airdrop.fight.foundation/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdrop.fight.foundation/
Last updated: 2026-03-24