blockstreetmoney[.]xyz

This domain, blockstreetmoney.xyz, is identified as an airdrop scam designed to impersonate legitimate cryptocurrency distribution platforms. The threat targets users by presenting fraudulent airdrop offers, likely aiming to harvest wallet credentials or distribute malicious smart contracts. Such schemes often employ social engineering tactics, including fake login portals or token claim forms, to deceive victims into disclosing sensitive information or executing unauthorized transactions. Analysis indicates the domain was registered on February 21, 2026, through the .xyz top-level domain (TLD) registry. It is flagged by 6 out of 95 security vendors on VirusTotal, with one confirmed appearance on a security blocklist. The domain resolved to the IP address 188.114.96.3 and utilized infrastructure associated with Hostinger and Cloudflare, including HTTP/3 protocol support. These technical indicators align with patterns observed in transient phishing campaigns, where domains are rapidly deployed and taken offline to evade detection. Users who interacted with blockstreetmoney.xyz should immediately revoke any connected wallet permissions and monitor their accounts for unauthorized transactions. If credentials were entered, affected parties must transfer assets to a new wallet and conduct a full security audit of their devices. Additionally, reviewing browser extensions and installed applications for unauthorized or suspicious software is recommended to mitigate potential secondary infections. Given the domain’s current offline status, further monitoring of associated infrastructure is advised to detect any resurgence of activity.