Investors who engage in airdrop, bounties are major victims. Before connecting to a Website, make sure its a verified one.
This is a great piece of advice, but OP I will like add that even if it is a verified website it is still bad to connect your wallet to. Connecting wallet to a site as official made your wallet to be on the internet or online as we call it and the most important aspect of keeping one’s funds save on wallet is to make sure it is totally offline, that is why even the reputable wallets are actually advised to be on airgapped device because not that the wallets will actually comprise your funds but it might get exposed to hackers through malwares if it is a wallet or the website might be hacked and then all information stolen from them, the risk is just similar to that of centralized exchanges
I was a victim of this trick through an airdrop I applied for. Since my wallet was hacked it has made me deploy a strategy that anytime I'm applying for any airdrop I should use a separate wallet entirely, and I stopped applying for any airdrop that we required me to connect to their website and pay a little fee to claim my airdrop.
Although airdrops entirely is not worth the stress but this is certainly the best piece of advice for anyone engaging in this similar airdrops. Aside not only using a different Wallet entirely if it is possible use a very different device to avoid any form of malware been caught on that device.
Airdrops requiring gas fees has long time been a way that shitcoin developers have used to scam people. They make them go through various airdrops and waiting periods when they final list they shit coins they require gas fees to able to withdraw after having enough gas fee deposits they simply just pull the rug or dump the project. This scam looks simple to identify but seriously it is still around getting more victims