airdropblockscout[.]live

The domain airdropblockscout.live was a crypto drainer phishing site designed to steal cryptocurrency by tricking users into connecting their wallets. It did not impersonate a specific brand but presented itself as a token airdrop under the name 'Blockscout Airdrop - Claim Your Tokens'. The site is currently taken offline, reducing immediate risk, though its prior activity targeted victims through fraudulent cryptocurrency offers.

Technical indicators show limited detection at the time of analysis, with 1 of 95 VirusTotal security vendors flagging airdropblockscout.live. The domain was registered through Web Commerce Communications Limited and resolved to the IP address 172.67.180.231, hosted on Cloudflare's infrastructure (AS13335). It appeared on 1 security blocklist (PhishDestroy) and used an SSL certificate issued by Google Trust Services / WE1. Technologies detected included Cloudflare Browser Insights and HTTP/3. The domain's creation date is not available, and no drainer kit was identified.

Users who interacted with airdropblockscout.live should immediately revoke any token approvals granted to the site via their wallet settings and transfer remaining funds to a new, secure wallet. Monitor transaction history for unauthorized activity and report the domain to platforms like Google Safe Browsing, PhishTank, or local cybercrime authorities. Enabling two-factor authentication on all accounts and verifying website authenticity before connecting wallets can prevent future exposure to crypto drainer scams.