airdrop-backpack[.]xyz

PhishDestroy identifies airdropt-backpack.xyz as an active crypto drainer domain engaged in brand impersonation of Airdrop Scam. The domain is currently classified under elevated risk status and continues to operate with malicious intent to deceive users within the cryptocurrency ecosystem.

This domain exhibits multiple indicators of compromise and fraudulent behavior. According to VirusTotal, airdropt-backpack.xyz is flagged by 4 of 95 security vendors. The domain resolves to IP address 188.114.96.3 and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 23, 2026. Security blocklists have already flagged this domain twice, indicating widespread recognition of its malicious nature. Notably, it has been blocked by MetaMask and SEAL, reinforcing its credibility as a threat.

Given the elevated risk level and confirmed malicious activities associated with airdropt-backpack.xyz, immediate action is required. Users are strongly advised to avoid interacting with this domain under any circumstances. System administrators and security teams should update firewall rules, DNS blocklists, and endpoint protection solutions to include this domain and its associated IP address. Reporting this domain to relevant cybersecurity platforms and threat intelligence feeds is critical to prevent further exploitation. Users who may have already engaged with this domain are urged to review their cryptocurrency wallets and accounts for unauthorized transactions, revoke any exposed permissions, and conduct a full security audit of their digital assets.