berachain[.]crabdance[.]com

This domain, berachain.crabdance.com, was identified as a brand impersonation campaign targeting Berachain. The domain was created on February 21, 2026, and was taken offline as of the report date, July 25, 2026. Analysis indicates that the domain was part of a crypto scam, specifically an airdrop scam, designed to deceive users into participating in fraudulent activities. The domain's infrastructure resolves to the IP address 168.167.71.18, which is located in Botswana and is associated with the Botswana Telecommunications Corporation (AS14988).

The domain was flagged by 4 out of 93 security vendors, suggesting a moderate level of detection. Additionally, the domain appears on two security blocklists, PhishDestroy and ScamSniffer, further confirming its malicious nature. The Gridinsoft trust score for this domain is 0 out of 100, indicating a complete lack of trustworthiness. The page title 'Berachain Airdrop' suggests that the site was designed to mimic a legitimate airdrop event, a common tactic in crypto scams.

Defenders should ensure that their security systems are updated to block this domain and educate users about the risks of participating in unsolicited airdrop events. The SSL certificate (R12) does not provide any additional security assurances and should not be considered a sign of legitimacy. Given the elevated risk level, it is recommended that organizations and individuals monitor their networks for any signs of compromise and take proactive measures to protect against similar threats.