nft-claim[.]avadam[.]app

PhishDestroy has flagged nft-claim.avadam.app as a high-risk domain currently under active investigation. The specific threat type is a crypto drainer, a dangerous category of phishing site designed to empty cryptocurrency wallets by tricking users into connecting their wallets or signing malicious transactions. Although the domain is presently offline, its recent activity and infrastructure suggest it was part of a coordinated campaign targeting NFT enthusiasts.

Technical indicators paint a clear picture of the threat. The domain was registered on March 28, 2026, through 1&1 Internet SE, and resolves to IP address 185.158.133.1. Its SSL certificate is issued by Google Trust Services (WE1), and the page title was found to be "vanilla-executor." VirusTotal reports 0 detections out of 95 security vendors, meaning it had not been widely flagged at the time of analysis. However, it appears on one security blocklist, and the domain has been taken offline. These details, combined with the domain name mimicking a legitimate NFT claim site, strongly indicate an intent to deceive users.

Users who may have encountered this domain should take immediate protective action. Since this is a crypto drainer, never connect a cryptocurrency wallet or enter private keys, seed phrases, or personal information on suspicious sites. If you previously interacted with nft-claim.avadam.app, revoke any token approvals granted to the site and transfer funds to a new wallet as a precaution. Enable two-factor authentication on all crypto-related accounts and monitor your wallet for unauthorized transactions. PhishDestroy continues to track this threat and will update its status as more intelligence becomes available.