xionairdrop[.]live

The domain xionairdrop.live was set up to impersonate the XION brand, likely as part of a crypto airdrop scam designed to trick visitors into connecting their wallets or revealing private keys. Such sites often promise free tokens but instead deploy crypto drainers that automatically transfer funds from victims' wallets once authorization is granted. The page title 'XION Airdrop' directly mimics legitimate airdrop announcements to lower user suspicion.

Technical analysis confirms this domain is malicious. VirusTotal data shows 2 out of 95 security vendors flag the domain as harmful, indicating it has been identified by multiple scanning engines. It also appears on at least 1 security blocklist and is specifically blocked by PhishDestroy. The domain resolves to IP 172.67.187.84, which is associated with Cloudflare's infrastructure, a common hosting choice for phishing sites to evade takedown. The domain is currently offline, but it may be reactivated under a similar name.

If you visited xionairdrop.live, do not connect any cryptocurrency wallet or enter any personal information. Immediately revoke any permissions granted to the site via your wallet settings. Run a full security scan on your device and monitor your crypto accounts for unauthorized transactions. Report the domain to your exchange or wallet provider. Avoid interacting with unsolicited airdrop offers, and always verify official project URLs through trusted sources before engaging.