airdrop-claim-etk[.]pages[.]dev

This domain is flagged as an active brand impersonation threat targeting users of Kinza Finance, a decentralized finance platform. The site presents itself as an official airdrop distribution portal for the "1st Batch" of Kinza Finance tokens, a common tactic to lure victims into interacting with malicious smart contracts or disclosing sensitive wallet credentials. Analysis indicates the site is designed to deceive users into connecting cryptocurrency wallets, potentially leading to unauthorized token transfers or complete account compromise through crypto drainer scripts embedded in the page. Infrastructure analysis reveals the domain was registered on July 3, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.44.57, hosted on Cloudflare's network (AS13335). The SSL certificate is issued by Google Trust Services, a legitimate provider, which may contribute to the site's appearance of authenticity. As of the latest scan, the domain has not been flagged by VirusTotal, showing 0 detections out of 95 security engines. It appears on one security blocklist and is currently classified as under investigation due to its recent creation and low detection rate, despite its active status and clear impersonation of a well-known DeFi brand. Users who have visited airdrop-claim-etk.pages.dev or interacted with its content should immediately disconnect any connected wallets from the site and revoke any suspicious smart contract approvals using a blockchain explorer or wallet management tool. It is recommended to monitor wallet activity for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Given the domain's low detection rate, users should remain cautious of similar airdrop-themed scams and verify the legitimacy of any token distribution through official project channels before engaging with external links.