claim-kintara[.]com

This domain, claim-kintara.com, operates as a crypto drainer, designed to deceive users into connecting wallets under the guise of a 5% TVL distribution from Kintara. Once connected, the site executes unauthorized transactions, siphoning cryptocurrency assets directly from victims' wallets without consent. The threat targets users familiar with decentralized finance (DeFi) platforms, exploiting trust in brand-associated promotions to facilitate theft. Analysis indicates the domain was registered on June 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to IP address 104.21.90.57 and is protected by Cloudflare, which obscures backend infrastructure. Security vendors on VirusTotal flagged the domain at a rate of 7/95, while three independent blocklists have listed it as malicious. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as the domain’s content and behavior remain explicitly harmful. Users who visited claim-kintara.com or interacted with its content should immediately disconnect any connected wallets from the site. Revoke all active sessions and permissions granted to unknown or suspicious applications via wallet settings. Monitor transaction history for unauthorized transfers and report any anomalies to the respective blockchain explorer. If assets were transferred, document all transaction hashes and contact relevant support channels for potential recovery options. Avoid further interaction with the domain or any associated links to prevent additional exposure.