Scam detected: binannce-airdrop

Scam detected Risk score: 95/100

ILLUSTRATIVE EXAMPLE — fictional domain, not a verified indicator: https://binannce-airdrop[.]invalid/claim-rewards

This is a critical phishing scam attempting to impersonate Binance with a fake airdrop claim. The URL 'binannce-airdrop.invalid' is a known malicious domain.

The scheme

Scammers create fake websites that mimic legitimate platforms like Binance. They use slightly altered domain names (typosquatting) to trick users into thinking they are on the official site. Once a user clicks the link and lands on the fake site, they are typically prompted to connect their wallet or enter sensitive information like seed phrases, which then allows the scammers to drain their funds.

Detective's reasoning

The message contains a URL, 'https://binannce-airdrop.invalid/claim-rewards', which is a clear indicator of a phishing attempt. The domain 'binannce-airdrop.invalid' is a typosquatting attempt on 'binance.com' and is explicitly flagged in our threat intelligence as a confirmed malicious phishing domain. The path '/claim-rewards' is designed to lure users with the promise of free cryptocurrency, a classic 'too good to be true' scam pattern.

Detected signals

IMPERSONATION — The URL 'binannce-airdrop.invalid' attempts to impersonate 'Binance', a well-known cryptocurrency exchange, by using a similar-sounding domain name.
TOO_GOOD_TO_BE_TRUE — The URL path '/claim-rewards' suggests an unsolicited offer of free cryptocurrency, which is a common scam tactic.
PHISHING_DOMAIN — The domain 'binannce-airdrop.invalid' is a known phishing domain, confirmed by external threat intelligence.
TYPOSQUATTING — The domain 'binannce-airdrop.invalid' is a typosquatting attempt on 'Binance'.
CRYPTO_SCAM_PATTERNS — The URL path '/claim-rewards' is a common pattern used in crypto airdrop scams.
FAKE_AIRDROP — The URL suggests a fake airdrop or reward claim, a common scam tactic.

Do this now

Delete this message immediately.
Block the sender to prevent further contact.
Report the message to the platform where it was received.

Already clicked or paid?

If you have already clicked the link or entered any information, immediately move all your funds to a new, secure wallet. Revoke any approvals given to suspicious contracts. Consider your seed phrase compromised if you entered it on the fake site.

Recommendation

Do NOT click this link. It is a confirmed phishing attempt.

Scan your own message for free

Report an AI-powered scam

Fake support bots, founder deepfakes, AI investment “agents” — send us the case and we investigate it. Submit a complaint · Browse scam playbooks