bp-claims[.]live

This domain is flagged as an elevated-risk airdrop scam designed to impersonate legitimate cryptocurrency platforms. Analysis indicates the site specifically mimics Backpack’s airdrop distribution system, presenting itself as an "Airdrop Calculator" to deceive users into disclosing wallet credentials or transferring funds under false pretenses. The threat type aligns with brand impersonation tactics targeting cryptocurrency communities, where victims are lured with promises of token allocations or rewards. Infrastructure analysis reveals the domain bp-claims.live was registered on March 29, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3, which is linked to Cloudflare’s network, a common obfuscation technique used to mask hosting origins. The site employs HTTP/3 and HSTS, likely to appear legitimate, but security vendors have flagged it as malicious, with 6 out of 95 engines on VirusTotal detecting it. The domain appears on four security blocklists and is actively blocked by multiple wallet protection systems, including MetaMask and ScamSniffer. Despite its current offline status, the infrastructure remains a potential threat due to its recent registration and association with known scam patterns. Mitigation against this threat requires heightened scrutiny of domains promoting airdrops or token distributions. Users should verify the legitimacy of such sites by cross-referencing official project announcements and avoiding interactions with domains registered through high-risk registrars. Wallet protection mechanisms, such as transaction simulation tools, can help detect and block unauthorized fund transfers. Organizations should update blocklists to include this domain and monitor for similar patterns, such as newly registered domains impersonating cryptocurrency platforms. If compromised, victims should immediately revoke wallet permissions and report the incident to relevant security teams for further analysis.