claim[.]anomasfoundation[.]xyz

This domain, claim.anomasfoundation.xyz, is identified as a phishing infrastructure designed to impersonate Binance, a major cryptocurrency exchange, under the pretext of an "Anoma Airdrop CLAIM." The site employs brand impersonation tactics to deceive users into disclosing sensitive credentials, including wallet private keys or exchange login details, which could lead to unauthorized asset transfers or account takeovers. The fraudulent airdrop theme exploits user interest in token distributions, a common social engineering vector in cryptocurrency-related scams. Analysis indicates the domain was registered on September 23, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with low-reputation domains. It resolves to the IPv6 address 2606:4700:3036::ac43:d0d5 and is currently flagged by 4 out of 95 security vendors on VirusTotal. The domain appears on two independent security blocklists, further corroborating its malicious classification. The Gridinsoft trust score of 0/100 underscores its high-risk nature, and the site has since been taken offline, though residual threats may persist in cached or archived forms. Users who visited claim.anomasfoundation.xyz should immediately revoke any permissions granted to connected wallets or applications, particularly those linked to Binance or cryptocurrency transactions. It is recommended to conduct a full security audit of associated accounts, including password resets and multi-factor authentication reviews. Any credentials entered on the site should be considered compromised. Monitoring for unauthorized transactions on linked wallets or exchange accounts is critical, and affected users should report the incident to relevant financial or cybersecurity authorities for further mitigation.