claim-quackai[.]xyz

This domain, claim-quackai.xyz, is flagged for brand impersonation targeting Quack AI, a platform specializing in AI governance for DAOs and Web3 protocols. The threat type is classified as brand_impersonation, a tactic commonly used to deceive users into believing they are interacting with a legitimate service. No specific drainer kit signatures were identified in initial scans, but the domain’s structure and content closely mimic the official Quack AI branding, including the page title "Quack AI - AI Governance for DAOs & Web3 Protocols | Quack AI."

Technical indicators confirm the domain’s malicious nature. VirusTotal reports 4 out of 95 security vendors flagging claim-quackai.xyz as malicious. The domain was registered on February 21, 2026, through an undisclosed registrar and resolves to the IP address 198.18.1.248. It appears on five security blocklists, including Polkadot, Codeesura, PhishDestroy, ScamSniffer, and Enkrypt. Google Safe Browsing (GSB) status is not explicitly listed, but the domain’s presence on multiple blocklists suggests active detection by major security frameworks.

As of the latest assessment, claim-quackai.xyz has been taken offline, reducing immediate risk to users. However, the infrastructure associated with the domain (e.g., IP address, registrar) may still pose residual threats. Organizations and users are advised to monitor for re-emergence under similar domains or IPs, implement blocklist updates, and verify all communications from Quack AI through official channels. Remaining risk is classified as elevated due to the domain’s recent creation and historical impersonation activity.