claim-moonbirds[.]live

This domain is classified as a high-risk crypto drainer, specifically designed to siphon cryptocurrency assets from victims under the guise of a token generation event (TGE) for Moonbirds NFT holders. The page title 'Birb TGE' and domain name suggest an attempt to impersonate or exploit the Moonbirds NFT project, tricking users into connecting wallets to malicious smart contracts that drain funds upon interaction. Analysis indicates the domain was registered on March 04, 2026, through NiceNIC International Group Co., Limited, and resolves to the IP address 104.21.40.219. It is flagged by 15 out of 95 security vendors on VirusTotal, appears on four security blocklists, and is blocked by multiple wallet security tools. The domain uses a Let's Encrypt SSL certificate and is proxied through Cloudflare, with detected technologies including HSTS, Cloudflare Browser Insights, and HTTP/3. Google Safe Browsing categorizes it under 'SOCIAL_ENGINEERING,' and Gridinsoft assigns it a trust score of 0/100. The domain is currently offline, but its infrastructure remains a potential threat vector. To mitigate risks associated with crypto drainers, users should avoid interacting with unsolicited token claims or airdrops, especially those promoted via social media or direct messages. Verify the legitimacy of any token event through official project channels before connecting wallets. Wallet software should be configured to block interactions with known malicious domains, and users should monitor for unauthorized transactions. If funds have been compromised, immediately revoke smart contract approvals and report the incident to relevant blockchain security teams for further analysis.