# berachain.crabdance.com — SUSPICIOUS

> Beware of berachain.crabdance.com impersonating Berachain. Avoid sharing personal info and report suspicious activity to stay safe online.

## Summary
PhishDestroy identifies berachain.crabdance.com as a medium-risk brand impersonation threat targeting Berachain users. The domain promotes a fake 'Berachain Airdrop' to lure victims into divulging sensitive information or engaging with potentially malicious content.

Technically, the domain was registered recently on February 21, 2026, and resolves to the IP address 168.167.71.18. It appears on four security blocklists and is flagged by 4 out of 95 security vendors on VirusTotal, indicating some detection but not widespread consensus. The domain's infrastructure supports ongoing malicious activity through impersonation tactics.

Currently active, berachain.crabdance.com poses a continuing risk to users seeking legitimate Berachain offers. PhishDestroy recommends avoiding interactions with this website, refraining from entering any credentials or personal data, and reporting the domain to appropriate security teams. Users should verify all Berachain communications through official channels to prevent compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Target brand: Berachain
- Page title: Berachain Airdrop

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 168.167.71.18
- SSL Issuer: R12

## Detection Status
- VirusTotal: 4 vendors flagged
  Vendors: ["Dr.Web", "G-Data", "Gridinsoft", "URLQuery"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01996245-b381-7271-9af8-632b60c8ef06.png
- PhishDestroy: https://phishdestroy.io/domain/berachain.crabdance.com/
- LLM endpoint: https://phishdestroy.io/domain/berachain.crabdance.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/berachain.crabdance.com/
Last updated: 2026-03-19