claim-hedera[.]com

PhishDestroy identifies claim-hedera.com as an elevated-risk brand impersonation targeting users of the Hedera network. This domain is specifically designed to mimic a legitimate $HBAR airdrop, a common crypto drainer tactic that tricks victims into connecting their wallets or revealing private keys. Although the domain is currently offline, its registration details and threat intelligence signals indicate a well-orchestrated phishing campaign.

Technical analysis reveals that claim-hedera.com was created on March 31, 2026, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. The site resolves to IP 188.114.97.3 and lacks an SSL certificate, a major red flag for any site handling sensitive data. VirusTotal shows only 1 out of 95 security vendors flagging the domain, highlighting gaps in detection. However, AlienVault OTX lists it in a threat intelligence pulse, and it appears on 4 security blocklists. The page title, "$HBAR AirDrop | Hedera," is a direct lure for cryptocurrency enthusiasts.

To stay safe, never connect your wallet to unknown airdrop sites; always verify official airdrop announcements through Hedera's verified channels. If you have already interacted with claim-hedera.com, immediately revoke token approvals and transfer funds to a new wallet. Report any remaining active pages to PhishDestroy for takedown. Vigilance against fake airdrops remains critical in the crypto space.