scanairdrop[.]pro

PhishDestroy identifies scanairdrop.pro as an active crypto drainer impersonating Airdrop Scam, targeting cryptocurrency users with deceptive offers. This domain was flagged due to its malicious infrastructure designed to siphon funds under the guise of airdrop rewards, a common tactic among crypto scammers. Visitors risk irreversible financial loss if they connect wallets or share credentials, as the site exfiltrates assets without consent. This domain exhibits multiple red flags confirmed by threat intelligence: it currently has 0 detections on VirusTotal out of 95 scanners, indicating evasion of antivirus engines. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain was created on April 20, 2026, and resolves to IP 172.67.208.205 with a Let’s Encrypt SSL certificate, a combination often abused for short-lived malicious campaigns. Its recent creation suggests a hurried deployment to capitalize on trending airdrop narratives. Users who visited scanairdrop.pro should immediately disconnect any connected wallets using blockchain explorers or wallet interfaces, revoke any inadvertently approved permissions, and scan devices with updated antivirus software. Report the domain to your browser’s safe browsing tool and file a complaint with relevant authorities such as the FBI IC3 or local cybercrime units. Avoid re-visiting the site and warn others in crypto communities to prevent further victimization.