claim[.]calderaxyz[.]foundation

The domain claim.calderaxyz.foundation is a phishing site engaged in brand impersonation targeting MetaMask users. It presents itself as a cryptocurrency token drop, specifically titled '$ERA Genesis Token Drop', to deceive victims into disclosing wallet credentials or transferring funds. No drainer kit was identified, but the site poses an elevated risk due to its fraudulent representation of a trusted brand. As of the latest verification, claim.calderaxyz.foundation has been taken offline.

Technical indicators confirm the malicious nature of claim.calderaxyz.foundation. The domain is flagged by 1 of 95 VirusTotal security vendors, including CRDF, and appears on 1 security blocklist (PhishDestroy). It was created on February 21, 2026, and resolves to the IP address 104.21.48.1, hosted by Cloudflare in the US (AS13335). The SSL certificate is issued by Cloudflare TLS Issuing ECC CA 1. Google Safe Browsing has not flagged the domain, and the Gridinsoft trust score is 0/100.

Victims of claim.calderaxyz.foundation should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials were entered, users should change their MetaMask password and enable two-factor authentication (2FA) on all associated accounts. Report the phishing domain to MetaMask's official support channels and submit it to platforms like PhishTank or Google Safe Browsing to prevent further abuse.