wagmi-drop[.]fun

This domain, wagmi-drop.fun, was actively impersonating the DexScreener platform to conduct cryptocurrency airdrop phishing operations. The site presented itself as an official token distribution portal under the title 'Airdrop Live | Claim Solana Token Airdrops,' targeting users seeking Solana-based token claims. Analysis indicates the infrastructure was designed to harvest wallet credentials and private keys by mimicking legitimate airdrop claim processes, a common tactic in cryptocurrency phishing campaigns. Infrastructure analysis reveals the domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with phishing domains. The domain resolved to the IP address 104.21.16.246 and was flagged by 2 out of 95 security vendors on VirusTotal. Additionally, it appeared on three distinct security blocklists, including MetaMask and SEAL, and received a trust score of 0/100 from Gridinsoft. These indicators confirm the domain's malicious intent and elevated risk classification. Users who visited wagmi-drop.fun or interacted with its content should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet. It is recommended to monitor accounts for unauthorized transactions and report the incident to relevant blockchain security teams. No further interaction with the domain should occur, as it has since been taken offline. Organizations should update blocklists to include this domain and its associated IP address to prevent future exposure.