# airdrop.sclabs.xyz — MALICIOUS

> Discover the risks linked to airdrop.sclabs.xyz, a crypto drainer domain now offline. Learn how it operated and what to do if exposed.

## Summary
PhishDestroy identifies airdrop.sclabs.xyz as a medium-risk crypto drainer domain designed to steal cryptocurrency assets from unsuspecting users. Such domains pose significant financial threats by tricking users into revealing sensitive wallet information.

This phishing scheme likely involved fake airdrop offers to lure victims into connecting their wallets or inputting private keys, enabling attackers to drain funds. The domain was registered in 2026 and appeared on multiple security blocklists before being taken offline.

Users who visited airdrop.sclabs.xyz should immediately check their wallet activity for unauthorized transactions and consider transferring assets to a new wallet. Avoid interacting with suspicious airdrop sites and use trusted security tools to stay protected.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Scam type: Airdrop Scam
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Dead domain
- IP: 104.21.67.229
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["CyRadar", "Forcepoint ThreatSeeker", "Gridinsoft", "Sophos", "Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0197ed6d-1f85-70ca-a1b6-22ce43c16017.png
- PhishDestroy: https://phishdestroy.io/domain/airdrop.sclabs.xyz/
- LLM endpoint: https://phishdestroy.io/domain/airdrop.sclabs.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/airdrop.sclabs.xyz/
Last updated: 2026-03-16