airdrop[.]qrbase[.]xyz

The domain airdrop.qrbase.xyz is a phishing site engaged in brand impersonation targeting the Base blockchain platform. It presents itself as a legitimate airdrop campaign offering USDC rewards to deceive users into connecting their crypto wallets, though no drainer kit was confirmed. As of the latest verification, airdrop.qrbase.xyz has been taken offline, but its prior activity poses an elevated risk of financial scam through fraudulent airdrop claims.

Technical indicators confirm the malicious nature of airdrop.qrbase.xyz. The domain was flagged by 2 of 95 VirusTotal security vendors, including Forcepoint ThreatSeeker and SOCRadar, and appears on 1 security blocklist (PhishDestroy). Registered through NameCheap, Inc. on February 18, 2025, it resolves to the IP address 104.21.56.66, hosted on Cloudflare’s network (AS13335). No SSL issuer was available, and the observed page title was 'QRbase Airdrop — Claim Your USDC Reward on Base'. Technologies detected include Node.js, React, Next.js, and Cloudflare services, reinforcing its sophisticated but deceptive infrastructure.

Users who interacted with airdrop.qrbase.xyz should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to prevent unauthorized access. Report the domain to platforms like Google Safe Browsing, the impersonated brand (Base), and relevant security communities such as PhishTank or ScamAdviser. Monitor accounts for suspicious transactions and enable two-factor authentication on all crypto-related services to mitigate further risk.