Cerca i domini monitorati ed esamina le prove archiviate, i rilevamenti e gli ultimi dati relativi alla disponibilità osservata.
222,797
Totale monitorato
216,924
VT rilevato
93,211
Ultima visualizzazione: attivo
129,586
Non disponibile all'ultimo controllo
1
VT In attesa di conferma
How This Attack Works
Fake Airdrop Scams exploit the burgeoning interest in cryptocurrencies by deceiving users into believing they are receiving free tokens.
STEP 1
Bait with Free Tokens
Scammers create fake websites promising free cryptocurrency airdrops to lure victims.
STEP 2
Collect Personal Data
Users are prompted to enter personal details or connect their crypto wallets to receive the airdrop.
STEP 3
Execute a Scam Transaction
Once connected, scammers initiate unauthorized transactions or steal sensitive data.
STEP 4
Disappear with the Loot
Scammers transfer stolen funds to anonymous accounts, disappearing without a trace.
Technical Analysis
Fake Airdrop Scams often involve sophisticated phishing techniques. Attackers use clone websites that mimic legitimate airdrop events. These sites are built using JavaScript and HTML to create convincing interfaces. Scammers may employ smart contract functions such as 'transfer' and 'approve' to gain unauthorized access to victims' wallets. Additionally, phishing emails and social media posts are used to drive traffic to these malicious websites. Infrastructure often involves domini registrati tramite top registrars like NICENIC INTERNATIONAL GROUP CO., LIMITED, ensuring anonymity and making it challenging to track the perpetrators.
Real Cases
The Ethereum Classic Airdrop Scam (2024)
$3.5 million stolen
Scammers created a fake Ethereum Classic airdrop event, stealing millions from unsuspecting users.
Fake Uniswap Airdrop (2023)
$2 million stolen
A bogus Uniswap token airdrop fooled users into relinquishing control of their wallets.
The Polkadot Giveaway Fraud (2024)
$1 million stolen
A fake Polkadot giveaway led to substantial financial losses for crypto enthusiasts.
How to Detect
Unsolicited messages about free airdrops
Domini with unusual TLDs like .xyz and .top
Requests for private keys or wallet access
Poorly designed websites with typos
Urgente calls-to-action pressuring immediate response
How to Protect Yourself
1
Verify airdrop legitimacy through official channels
2
Avoid clicking on unsolicited links
3
Use hardware wallets for extra security
4
Enable two-factor authentication
5
Regularly update software and security protocols
Frequently Asked Questions
Data sourced from PhishDestroy threat intelligence database — 6,454 domains tracked for this threat type
Fake Airdrop Scam 6,454 domains
gork.memepage.io
gorkofficial.xyz
hackink.xyz
hederaairdrop.com
heimdalfinance.xyz
hemitoken.com
houldes.xyz
hunterairdrop.com
hwg.memepage.io
hyperliquid-airdrop-faq.pages.dev
hyperliquid-hype-coin-rewards.pages.dev
hyperliquid-sol.live
hyperswap-airdrop-en-cdn.pages.dev
hypurrapp.vercel.app
impdemowell.xyz
inch-airdrop-quest.lovable.app
info-humidifi.app
infrared-finance.pro
inventmoney.icu
io-hyperswap-airdrop.pages.dev
iryis.xyz
isv-global.org
jeetdrop.top
jito.restaking.network
jito.solcore.cc
jitob.xyz
jitoget.xyz
join-franklinsturtle.xyz
join-nyans.xyz
join-ploi.xyz
join-trolls.xyz
juice-finance-9fh.pages.dev
jup-dex.lol
jup-exchange.icu
jup-receive.live
jupags.pages.dev
jupcoin-x.org
jupfn.com
jupiter-allocation.com
jupiter.ag-usa.blog
justg.live
kashsolana.fun
katana.lat
kilogramkilogrammov.com
kitairdrop.xyz
ledger.fintrack.link
legion.it
lighter-calculator.swishi.xyz
lightertrade.live
lighterup.xyz
lindinao.app
linea-airdrop.com
linea-build-hub.com
linea-check.com
lineaslive.com
live-bitcoinos.space
live-hyperliq.xyz
lobstar-sol.live
lobstarsolana.net
lobstarwildeai.com
loophype.site
lsjfnvldskfjvn.com
m336.pages.dev
machi.solgrid.one
maestrobotsrward.com
magavoice.info
magilo.pages.dev
marinaderewards.live
massdropmultisenderapp.xyz
mastebot.network
masterb0t.com
masterb0t.xyz
masterbot-drop.fun
masterbot.trade
megarebel.app
megarebels.com
melaniatrump.co
merkl.sale
metadaos.xyz
meteora-claim.top
meteora.team
meteoraclaim.com
meteorag.app
mezoairdrop.xyz
mgn.mintpad.org
midnight-casino.vercel.app
mikasol.live
mitosisdefi.run
monacoinsol.com
monkeyairdrop.online
moodeng.top
moon-d8c.pages.dev
mycloudwallets.vercel.app
myxfinancelive.xyz
myzoompay.net
nadocalc.xyz
naiholder.uno
nanj.offcoin.one
nansenpresale.xyz
Pipeline di risposta alle minacce
Come vengono verificati tutti i domini presenti in questo hub e come vengono neutralizzate le minacce confermate. Visualizzazione completa della pipeline →
Controlli relativi alle informazioni sulle minacce— ogni dominio viene analizzato e sottoposto a verifica incrociata rispetto a:
urlscan.ioScreenshot · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency RelazioneCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Sicurezza FiltersQuad9 · AdGuard · CleanBrowsingWeb-ControllaFull surface scan
crt.shSincronizzazione globale dei fornitori— i rilevamenti confermati vengono trasmessi a 29 partner:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecRecensione del sitoAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftRimozione APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.RelazioneHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust