# backpack-claim.live — SUSPICIOUS

> PhishDestroy identifies backpack-claim.live as an airdrop brand impersonation scam posing as a Backpack wallet airdrop calculator.

## Summary
PhishDestroy identifies backpack-claim.live as an active Airdrop Scam brand impersonation domain designed to deceive users into believing they are interacting with a legitimate Backpack wallet tool. The page masquerades as an 'Airdrop Calculator' to lure victims into entering cryptocurrency wallet credentials or seed phrases, enabling credential harvesting and fund theft. This site is part of a broader trend of fake crypto airdrop calculators used to exploit users seeking free token opportunities.  This domain poses an elevated risk as confirmed by multiple security vendors and blocklists. VirusTotal reports 3 out of 95 security vendors flagged this domain, while SEAL and MetaMask have blocked access. The domain was registered on March 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP 188.114.96.3 with a valid Let's Encrypt SSL certificate. Additionally, it appears on 2 security blocklists, further validating its malicious nature.  Users who visited backpack-claim.live should immediately disconnect from the site and revoke any permissions granted to it. If wallet credentials or seed phrases were entered, transfer remaining funds to a newly generated wallet and enable multi-factor authentication on all crypto accounts. Monitor transactions closely for unauthorized activity and report any suspicious transfers to relevant authorities. Avoid interacting with similar domains promoting 'free airdrops' without thorough verification.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Airdrop Scam
- Page title: Backpack — Airdrop Calculator

## Domain Intelligence
- Registered: 2026-03-28 23:26:25
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["SEAL", "MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d8661b9c-a4ac-403f-8502-1f4541d17eb7
- PhishDestroy: https://phishdestroy.io/domain/backpack-claim.live/
- LLM endpoint: https://phishdestroy.io/domain/backpack-claim.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/backpack-claim.live/
Last updated: 2026-03-29