claim-mantle[.]xyz

The domain claim-mantle.xyz was registered on February 21, 2026 and is currently taken offline. Intelligence indicates that the site was used to impersonate the Mantle brand in a crypto‑focused scam. The domain appears on five independent security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura, confirming that multiple community‑driven feeds have flagged it as malicious. A Gridinsoft trust assessment assigns a score of 0 out of 100, reflecting a complete lack of trustworthiness.

VirusTotal analysis shows that 11 of 93 scanned security vendors flagged the domain, providing independent confirmation of its malicious nature. The specific scam type is identified as a crypto scam, suggesting attempts to lure victims into fraudulent cryptocurrency transactions or credential harvesting. No public page title or content snapshot is available, and the site’s SSL certificate status, hosting IP, registrar details, and Safe Browsing or OTX entries have not been disclosed in the supplied intelligence. Because the domain is offline, active probing is not possible at this time, but the historical presence on multiple blocklists and the low trust score indicate that it should be treated as high‑risk.

Defenders should ensure that claim-mantle.xyz is added to local deny lists, DNS filtering rules, and proxy blocklists. Threat hunting teams should search for any recent outbound connections or DNS queries to this domain across their environment, especially in contexts involving cryptocurrency services or Mantle‑related assets. Incident response procedures should include verification of any credential or wallet address disclosures that match the timeframe of the domain’s activity. Continuous monitoring of the listed blocklists for re‑appearance or related domains is recommended, as actors often rotate infrastructure after takedown.