ton-airdrop[.]pages[.]dev

PhishDestroy identifies ton-airdrop.pages.dev as an active crypto drainer impersonating the Airdrop Scam brand. This domain is currently in operation and poses a high risk to users who may fall victim to its malicious campaigns. The infrastructure leverages deceptive tactics to mimic legitimate airdrop promotions, with the sole intent of draining cryptocurrency assets from unsuspecting victims.

This domain was flagged by 15 of 95 VirusTotal security vendors, indicating a high threat level. It resolves to IP 188.114.96.3 and is registered through Cloudflare, Inc. The domain has been blocked by MetaMask, ScamSniffer, SEAL, and Maltrail, and appears on 4 security blocklists. Despite utilizing a Google Trust Services SSL certificate, the malicious intent remains evident through its impersonation tactics and widespread detection.

The current status of ton-airdrop.pages.dev is active and high-risk. Users are strongly advised to avoid interacting with this domain or any associated links. Block the domain at the network level and update security tools with the latest indicators of compromise (IOCs). Report this domain to your organization’s security team and relevant crypto security platforms like ScamSniffer or MetaMask to help mitigate further propagation. Exercise caution with unsolicited airdrop promotions and verify legitimacy through official channels before engaging.