nftrewardsclaim[.]onrender[.]com

This domain, nftrewardsclaim.onrender.com, is flagged as a high-risk brand impersonation phishing site targeting Binance users. Analysis indicates the site operates as a wallet drainer, presenting a fraudulent Wallet Connect Interface to trick victims into connecting cryptocurrency wallets. The infrastructure is designed to siphon assets by mimicking legitimate authentication flows, a common tactic in cryptocurrency theft campaigns. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. and resolves to the IP address 216.24.57.251, hosted on AS397273 Render in the United States. The SSL certificate is issued by Google Trust Services (WE1), a detail often exploited to lend false legitimacy. The domain was created on February 21, 2026, and is currently detected by 14 out of 95 security vendors on VirusTotal. It appears on four security blocklists and is actively blocked by wallet security providers and browser-based phishing filters. As of the latest verification, the site remains active and continues to pose a significant risk to users. Response actions by security providers include blocking access through browser extensions and wallet integrations, but the domain has not been taken down at the registrar or hosting level. The remaining risk is high due to the domain's persistence, the targeted nature of the attack, and the potential for financial loss. Users are advised to treat any interaction with this domain as malicious and avoid connecting wallets or entering credentials.