Editorial mirrorBrand mentions redacted to public IDs. Hover to inspect. Everything else is theatre.How it works
THE ENABLERS REGISTRYRegistrar accountability archive
Archive LiveRead-only public record · No ads · No tracking
Case file folder with redacted documents and confidential investigation report.
CASE / ZH / DOMAIN

Fake 空投诈骗: A THE ENABLERS REGISTRY Analysis

The Enablers Registry·Editorial mirror·/zh/domain/

Public record copy. Brand names withheld, public accreditation numbers preserved. If the body below says “we”, that means the original publisher, not this mirror. TER only preserves, redacts, and re-contextualizes.

Fake 空投诈骗
HIGH THREAT

Understanding the Fake 空投诈骗: Protecting Your Digital Assets

Fake 空投诈骗s represent a significant cybersecurity threat, with 238 detected domains and 37 currently active. Our top TLDs include .xyz and .com, highlighting the widespread nature of this threat.

6,389
Domains Detected
HIGH
Threat Level

How This Attack Works

Fake 空投诈骗s exploit the burgeoning interest in cryptocurrencies by deceiving users into believing they are receiving free tokens.

STEP 1
Bait with Free Tokens
Scammers create fake websites promising free cryptocurrency airdrops to lure victims.
STEP 2
Collect Personal Data
Users are prompted to enter personal details or connect their crypto wallets to receive the airdrop.
STEP 3
Execute a Scam Transaction
Once connected, scammers initiate unauthorized transactions or steal sensitive data.
STEP 4
Disappear with the Loot
Scammers transfer stolen funds to anonymous accounts, disappearing without a trace.

Technical Analysis

Fake 空投诈骗s often involve sophisticated possibly phishing techniques. Attackers use clone websites that mimic legitimate airdrop events. These sites are built using JavaScript and HTML to create convincing interfaces. Scammers may employ smart contract functions such as 'transfer' and 'approve' to gain unauthorized access to victims' wallets. Additionally, possibly phishing emails and social media posts are used to drive traffic to these malicious websites. Infrastructure often involves domains registered through top registrars like [REDACTED], ensuring anonymity and making it challenging to track the perpetrators.

Real Cases

The Ethereum Classic 空投诈骗 (2024)
$3.5 million stolen
Scammers created a fake Ethereum Classic airdrop event, stealing millions from unsuspecting users.
Fake Uniswap Airdrop (2023)
$2 million stolen
A bogus Uniswap token airdrop fooled users into relinquishing control of their wallets.
The 波卡 Giveaway Fraud (2024)
$1 million stolen
A fake 波卡 giveaway led to substantial financial losses for crypto enthusiasts.

How to Detect

Unsolicited messages about free airdrops
Domains with unusual TLDs like .xyz and .top
Requests for private keys or wallet access
Poorly designed websites with typos
Urgent calls-to-action pressuring immediate response

How to Protect Yourself

1 Verify airdrop legitimacy through official channels
2 Avoid clicking on unsolicited links
3 Use hardware wallets for extra security
4 Enable two-factor authentication
5 Regularly update software and security protocols

Frequently Asked Questions

What is Fake 空投诈骗?
Fake 空投诈骗s deceive users by offering free cryptocurrency tokens, leading them to fraudulent sites to steal personal and financial information.
How much money has been stolen through Fake 空投诈骗?
Millions of dollars have been stolen, with significant cases like the Ethereum Classic 空投诈骗 costing $3.5 million in 2024.
How do I protect myself from Fake 空投诈骗?
Verify all airdrop offers through official sources, avoid clicking unknown links, and secure your crypto assets with hardware wallets and 2FA.
What should I do if I'm a victim of Fake 空投诈骗?
Immediately report the incident to your local authorities and contact your bank or wallet provider to secure your accounts and limit further losses.
Data sourced from THE ENABLERS REGISTRY threat intelligence database — 6,389 domains tracked for this threat type
空投诈骗 — Threat Intelligence Kit Active Threat
6,389
Domains
1,367
Alive
5,022
Taken Down
6.6
Avg VT
21.4%
Alive Rate
94%
Detected
Since Mar 2024 3,073 domains with VT ≥ 5
Fake 空投诈骗 6,389 domains
Screenshot of login.NASDAQ:COIN.page
login.NASDAQ:COIN.page
7 VTUnknownNASDAQ:COIN
Screenshot of login.NASDAQ:COIN.page
login.NASDAQ:COIN.page
Screenshot of magma.airdrpsalerts.cfd
magma.airdrpsalerts.cfd
7 VTUnknown
Screenshot of magma.airdrpsalerts.cfd
magma.airdrpsalerts.cfd
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainersolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownfoundation
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainersolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainersolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownbase
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED].de
[REDACTED].de
7 VTUnknownAngel Drainer
Screenshot of [REDACTED].de
[REDACTED].de
Screenshot of mon.portal-drops.cfd
mon.portal-drops.cfd
7 VTUnknownAngel DrainerLEI:5493004F7TI6QBM4WX72
Screenshot of mon.portal-drops.cfd
mon.portal-drops.cfd
Screenshot of mon.portal-drops.club
mon.portal-drops.club
7 VTUnknownLEI:5493004F7TI6QBM4WX72
Screenshot of mon.portal-drops.club
mon.portal-drops.club
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainerrevolut
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownRaydium
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of mymusikarisma.eu
mymusikarisma.eu
7 VTUnknown
Screenshot of mymusikarisma.eu
mymusikarisma.eu
Screenshot of [REDACTED]
[REDACTED]
7 VT直播
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
7 VT直播Netflix
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknowncoinmarketcap
Screenshot of [REDACTED]
[REDACTED]
Screenshot of network.mlra.foundation
network.mlra.foundation
7 VTUnknown
Screenshot of network.mlra.foundation
network.mlra.foundation
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainerfoundation
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownbase
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainerarbitrum
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownfoundation
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of ouyi.red
ouyi.red
7 VT直播
Screenshot of ouyi.red
ouyi.red
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel DrainerNASDAQ:COIN
Screenshot of [REDACTED]
[REDACTED]
Screenshot of paintswap.run
paintswap.run
7 VT直播
Screenshot of paintswap.run
paintswap.run
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainersolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownfoundation
Screenshot of [REDACTED]
[REDACTED]
Screenshot of pfpchdfbngkdyvit6s2nqwqv556xvnlwvfflgktdudux4qmfhzpa.exnihilio.dnshome.de
pfpchdfbngkdyvit6s2nqwqv556xvnlwvfflgktdudux4qmfhzpa.exnihilio.dnshome.de
7 VTUnknown
Screenshot of pfpchdfbngkdyvit6s2nqwqv556xvnlwvfflgktdudux4qmfhzpa.exnihilio.dnshome.de
pfpchdfbngkdyvit6s2nqwqv556xvnlwvfflgktdudux4qmfhzpa.exnihilio.dnshome.de
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainerrevolut
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VT直播
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownPayPal
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Draineracross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainer[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainer[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainer[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainerrevolut
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of qpay-sol.us
qpay-sol.us
7 VTUnknownSolana Draineracross
Screenshot of qpay-sol.us
qpay-sol.us
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownrevolut
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana DrainerRaydium
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownacross
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
7 VT直播
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainerrevolut
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VT直播Wallet Connect 滥用
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainer[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainer[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VT直播
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of s.portal-drops.cfd
s.portal-drops.cfd
7 VTUnknownAngel Drainer
Screenshot of s.portal-drops.cfd
s.portal-drops.cfd
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainerrevolut
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainersolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of sca.airdrpsalerts.cfd
sca.airdrpsalerts.cfd
7 VTUnknown
Screenshot of sca.airdrpsalerts.cfd
sca.airdrpsalerts.cfd
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel DrainerNASDAQ:COIN
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana DrainerSolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownbnb chain
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownbackpack
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownfoundation
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana DrainerSolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel DrainerSolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of starknet.portal-drops.dev
starknet.portal-drops.dev
7 VTUnknownAngel DrainerStarknet
Screenshot of starknet.portal-drops.dev
starknet.portal-drops.dev
Screenshot of sui.portal-drops.dev
sui.portal-drops.dev
7 VTUnknownAngel DrainerLEI:5493004F7TI6QBM4WX72
Screenshot of sui.portal-drops.dev
sui.portal-drops.dev
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
[REDACTED].pk
7 VTUnknown空投诈骗
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VT直播
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknown[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainer
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownSolana Drainersolana
Screenshot of [REDACTED]
[REDACTED]
Screenshot of [REDACTED]
[REDACTED]
7 VTUnknownAngel Drainerarbitrum
Screenshot of [REDACTED]
[REDACTED]
[REDACTED]
7 VTUnknownNASDAQ:COIN
« Prev 20 21 22 23 24 25 26 Next » Page 23 of 64

Continue browsing the ledger

This page is the editorial mirror. Brand names are redacted to public IANA / business identifiers. Use the index to navigate other case files.

Open registrar ledger → All briefings