ansem-airdrop-tracker[.]fun

This domain, ansem-airdrop-tracker.fun, operates as a crypto drainer targeting users of the AnsemRadar on-chain airdrop tracking service. The site presents itself as a legitimate airdrop monitoring tool, using the page title 'AnsemRadar · Live On-Chain Airdrop Tracker' to deceive visitors into connecting cryptocurrency wallets. Once connected, the drainer silently siphons funds by executing unauthorized transactions, exploiting the trust associated with the AnsemRadar brand. The threat is particularly insidious due to its use of social engineering to mimic a service commonly used by cryptocurrency enthusiasts, increasing the likelihood of successful compromise.

Analysis indicates the domain was registered on June 28, 2026, through Name.com, Inc., a registrar frequently observed in malicious infrastructure. It resolves to the IP address 216.198.79.1 and appears on three security blocklists, signaling its detection by multiple threat intelligence sources. VirusTotal reports that 4 out of 95 security vendors have flagged the domain as malicious, while AlienVault OTX has included it in at least one threat intelligence pulse. These indicators confirm the domain's active involvement in fraudulent activities and its classification as a high-risk threat.

Users who have visited ansem-airdrop-tracker.fun or interacted with its content should immediately disconnect any connected wallets and revoke permissions granted to the site via wallet management platforms. It is recommended to scan the device for malware and monitor all linked cryptocurrency accounts for unauthorized transactions. If funds have been drained, affected parties should report the incident to relevant blockchain analytics services and law enforcement. Proactive measures, such as verifying domain registration details and consulting security blocklists before interacting with unfamiliar sites, can mitigate future risks.