claimmantrarewards[.]xyz

This domain, claimmantrarewards.xyz, operates as a crypto drainer, a type of malicious infrastructure designed to siphon cryptocurrency from connected wallets. Crypto drainers typically employ social engineering tactics, such as fake reward claims or airdrop promotions, to trick users into authorizing transactions that transfer assets to attacker-controlled addresses. The domain’s page title, 'Nur einen Moment…', suggests an attempt to mimic legitimate waiting pages while executing malicious scripts in the background, a common tactic to evade immediate detection by victims. Analysis of the domain’s infrastructure reveals multiple indicators of malicious activity. The domain was registered on August 18, 2025, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. VirusTotal reports that 6 out of 95 security vendors flag the domain as malicious, and it appears on one security blocklist. The domain resolves to the IP address 188.114.97.3, which is part of a network range known for hosting phishing and scam infrastructure. Additionally, the SSL certificate is issued by Google Trust Services, a detail that may lend a false sense of legitimacy to the site. Users who visited claimmantrarewards.xyz should assume their wallet credentials or connected funds may have been compromised. Immediate steps include revoking any active wallet authorizations, transferring remaining assets to a new wallet, and monitoring transaction histories for unauthorized activity. If the wallet was connected or sensitive information was entered, users should also scan their devices for malware, as crypto drainers may deploy additional payloads. Given the domain’s current offline status, further interaction is unlikely, but vigilance is advised for similar scams using comparable infrastructure or social engineering tactics.