# mmt.airdrorp.finance — MALICIOUS — Crypto Drainer (Angel Drainer)

> mmt.airdrorp.finance is linked to crypto drainers. Avoid interacting and never share private keys. Stay cautious and verify before trusting airdrop sites.

## Summary
PhishDestroy identifies mmt.airdrorp.finance as a high-risk crypto drainer masquerading as a Momentum Airdrop platform. It falls within the Angel Drainer family, designed to steal user crypto assets.

This domain was created in December 2022 and resolves to IP 104.21.6.218. Registered via Web Commerce Communications Limited, it is currently listed on multiple security blocklists and flagged by 14 security engines on VirusTotal, signaling malicious intent.

The domain is offline following detection and takedown efforts. Users should avoid any interaction with this site and remain vigilant against similar scam airdrop pages. PhishDestroy continues monitoring for related threats under seed 05629b.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Angel Drainer)
- Site status: dead (HTTP 403)
- Drainer type: Angel Drainer
- Scam type: Airdrop Scam
- Kit: Airdrop Scam
- Page title: Momentum Airdrop

## Domain Intelligence
- Registered: 2022-12-17 00:00:00
- Expires: 2026-12-17 00:00:00
- Registrar: Web Commerce Communications Limited
- Country: MY
- IP: 104.21.6.218
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: cass.ns.cloudflare.com anirban.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "BitDefender", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Seclookup", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a7dfa-4012-703f-8a71-d055a5290600.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/b96589ba-d971-412b-aa45-0a66df1b8ee8
- Wayback Machine: https://web.archive.org/web/https://mmt.airdrorp.finance
- PhishDestroy: https://phishdestroy.io/domain/mmt.airdrorp.finance/
- LLM endpoint: https://phishdestroy.io/domain/mmt.airdrorp.finance/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mmt.airdrorp.finance/
Last updated: 2026-03-19