kine-claim[.]xyz

Analysis as of 24 July 2026 shows that the domain kine-claim.xyz was registered on 21 February 2026 and is currently taken offline. The site presented the generic page title “Just a moment…”, which is typical of placeholder pages used in drive‑by crypto‑drainer campaigns. The SSL certificate is issued by Cloudflare TLS Issuing ECC CA 1, indicating the domain was fronted through Cloudflare’s CDN. Reputation data places the domain on two public blocklists; it is explicitly blocked by PhishDestroy and ScamSniffer.

VirusTotal records indicate that six of ninety‑three scanning engines flagged the domain as malicious, reinforcing the classification of a crypto‑drainer scam. Gridinsoft assigned a trust score of 0 / 100, reflecting an extremely low confidence rating. No additional intelligence such as IP address, hosting ASN, or registrar details is publicly disclosed, and Safe Browsing or OTX entries have not been referenced. The combination of a recent creation date, low trust score, blocklist presence, and the Cloudflare‑provided TLS certificate aligns with known infrastructure used by crypto‑drainer operators to obscure origin and facilitate rapid takedown.

Defenders should ensure that firewalls, proxy filters, and DNS security solutions block kine-claim.xyz at both domain and sub‑domain levels, monitor for any resurgence of the domain or its aliases, and incorporate the observed indicators—page title, SSL issuer, and the six VirusTotal detections—into automated threat‑intel feeds. Continuous observation of Cloudflare‑associated certificate changes is advised, as attackers may reuse the same CDN edge to host new malicious payloads. Until further evidence emerges, the domain should be treated as an active crypto‑drainer threat with elevated risk.