claim[.]fluentportal[.]click

This domain, claim.fluentportal.click, operates as a crypto drainer, a specialized form of phishing infrastructure designed to illicitly siphon cryptocurrency from victims' digital wallets. The site employs social engineering tactics, typically masquerading as a legitimate airdrop or token claim portal, to deceive users into connecting their wallets. Once connected, malicious smart contracts or scripts automatically execute unauthorized transactions, draining funds without explicit user consent. The threat is particularly insidious due to its automation and the irreversible nature of cryptocurrency transactions, which often result in immediate financial loss for victims. Analysis of the domain's infrastructure reveals multiple indicators of malicious intent. The domain was registered on May 27, 2026, through Dynadot, LLC, a registrar frequently associated with abusive registrations. As of the latest assessment, the domain appears on one security blocklist and is flagged by 2 out of 95 security vendors on VirusTotal, including detections for fraudulent activity and crypto-related threats. Despite these warnings, the domain remains active, suggesting either delayed takedown efforts or deliberate evasion of detection mechanisms. Users who have interacted with claim.fluentportal.click should immediately revoke any wallet permissions granted to the site via their wallet provider's interface. It is critical to audit all connected applications and revoke access to any unfamiliar or suspicious services. Affected individuals should also transfer remaining funds to a new, secure wallet address and monitor their transaction history for unauthorized activity. Given the high-risk nature of this threat, users are advised to report the domain to relevant abuse channels and consider implementing additional security measures, such as hardware wallets or multi-signature requirements, to mitigate future risks.