# masaairdrop.site — MALICIOUS

> masaairdrop.site poses a medium risk as a crypto drainer. Avoid interacting with this domain and ensure your wallet security stays intact.

## Summary
PhishDestroy identifies masaairdrop.site as a medium-risk crypto drainer domain, designed to siphon cryptocurrency from victims by impersonating legitimate airdrop or crypto reward platforms. Such threats are critical as they can lead to significant financial loss and compromise of private keys.

The domain masaairdrop.site was created on February 21, 2026, and is currently offline. It resolved to the IP address 104.21.13.206 and appeared on two security blocklists. VirusTotal flagged it by 5 out of 95 security vendors. The website's page title referenced a suspected phishing site warning via Cloudflare, indicating third-party identification of malicious activity.

Users are strongly advised not to visit masaairdrop.site or provide any wallet credentials. To protect themselves, users should employ up-to-date security tools, avoid clicking on unsolicited crypto airdrop links, and verify domain authenticity before engaging in any transactions. Immediate removal of any connected wallet authorizations and monitoring for unauthorized transactions is recommended if interaction occurred.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Scam type: Airdrop Scam
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 104.21.13.206
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["archer.ns.cloudflare.com", "ziggy.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01993317-8071-7578-8b04-6694b3e2da45.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/09129517-23d2-4308-8126-896acb8d07ec
- PhishDestroy: https://phishdestroy.io/domain/masaairdrop.site/
- LLM endpoint: https://phishdestroy.io/domain/masaairdrop.site/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/masaairdrop.site/
Last updated: 2026-03-19