Search our database of flagged domains. Check if a website is a scam, phishing, or legitimate.
How This Attack Works
Fake Arnaque à l'« airdrop »s exploit the burgeoning interest in cryptocurrencies by deceiving users into believing they are receiving free tokens.
STEP 1
Bait with Free Tokens
Scammers create fake websites promising free cryptocurrency airdrops to lure victims.
STEP 2
Collect Personal Data
Users are prompted to enter personal details or connect their crypto wallets to receive the airdrop.
STEP 3
Execute a Scam Transaction
Once connected, scammers initiate unauthorized transactions or steal sensitive data.
STEP 4
Disappear with the Loot
Scammers transfer stolen funds to anonymous accounts, disappearing without a trace.
Technical Analysis
Fake Arnaque à l'« airdrop »s often involve sophisticated phishing techniques. Attackers use clone websites that mimic legitimate airdrop events. These sites are built using JavaScript and HTML to create convincing interfaces. Scammers may employ smart contract functions such as 'transfer' and 'approve' to gain unauthorized access to victims' wallets. Additionally, phishing emails and social media posts are used to drive traffic to these malicious websites. Infrastructure often involves domains registered through top registrars like NICENIC INTERNATIONAL GROUP CO., LIMITED, ensuring anonymity and making it challenging to track the perpetrators.
Real Cases
The Ethereum Classic Arnaque à l'« airdrop » (2024)
$3.5 million stolen
Scammers created a fake Ethereum Classic airdrop event, stealing millions from unsuspecting users.
Fake Uniswap Airdrop (2023)
$2 million stolen
A bogus Uniswap token airdrop fooled users into relinquishing control of their wallets.
The Polkadot Giveaway Fraud (2024)
$1 million stolen
A fake Polkadot giveaway led to substantial financial losses for crypto enthusiasts.
How to Detect
Unsolicited messages about free airdrops
Domains with unusual TLDs like .xyz and .top
Requests for private keys or wallet access
Poorly designed websites with typos
Urgent calls-to-action pressuring immediate response
How to Protect Yourself
1
Verify airdrop legitimacy through official channels
2
Avoid clicking on unsolicited links
3
Use hardware wallets for extra security
4
Enable two-factor authentication
5
Regularly update software and security protocols
Frequently Asked Questions
Data sourced from PhishDestroy threat intelligence database — 6,383 domains tracked for this threat type
Fake Arnaque à l'« airdrop » 6,383 domains
amlbot-scan.com
amltrustlab.com
api.vertexbasestation.click
arb-airdrop.work
aster-xdex.com
asterdex-claim.xyz
asterdex-eligibility.com
asterdex-s2.com
asterdexdashboard.com
asterdrop.run
astr.airdrpsalert.click
audius.us
avantisreward.center
bayc-reward.xyz
bearcoffeeclubnft.xyz
benefitsfazaacard.com
bfsdrop.top
birbmeme.lol
blackhols.xyz
blast-voucher.com
bonus-asterdex.com
boundless-zkc.xyz
buttcoindrop.xyz
cancersolana.com
cetus.portal-drops.dev
chainoperacoai.com
check-brevis.com
cityboy.memelabs.top
claim-airdroptradegx.pages.dev
claim-brainedge.pages.dev
claim-burger.xyz
claim-copperinu.pages.dev
claim-drop.pro
claim-moonbirds.xyz
claim-solan.com
claim-thq.live
claim.juplter.guru
claim02.com
claimbox.fun
claimpudgypenguins.xyz
claims-talus.org
claimsboundless.xyz
clalm-jupiter.icu
coinbase-review.net
coinbase.1099-irs.online
coinbase.you
connect-asterdex.com
connectcopy.pro
copi-airdrop.pages.dev
copperinu-events.fun
d3airdrop.xyz
defax.icu
defiapp.portal-drops.cfd
defiapp.portal-drops.dev
degens-27m.pages.dev
deloreanlabs.art
doordash-portal.com
drcn.live
drop-live.top
dropstrack.app
dututa.pages.dev
dydx-trade.xyz
dydx.portal-drops.dev
epstn-event.fun
ethereum0001.com
etherfidrop.xyz
ethlineabuild.com
event-avatar.fun
events-uscr.xyz
exabits.info
exabitsairdrop.xyz
exchange-jupp.icu
fil.airdrpsalert.click
findstats.xyz
flare-networkxrpclaim.com
franklin-coin.net
getbafe.xyz
getbonkmeme.fun
go-bag.fun
godbot.biz
godl-supply.com
haedal.airdrpalert.click
hbar.airdrpsalert.click
hubs-dappradar.top
humanpassportairdrop.xyz
hyper.liquid-secure.xyz
initcondaap.digital
join-youllgetnothings.xyz
jup.ink
jupag.onspace.app
jupbox-liveapp.world
jupiterag.icu
jups-mainnet.pages.dev
kalshipresale.xyz