claim-boundlles[.]app

The domain www.claim-boundlles.app was a crypto drainer phishing site designed to steal cryptocurrency from victims by tricking them into connecting their wallets. Unlike typical phishing pages, it did not impersonate a known brand or use a recognized drainer kit, instead presenting itself as a 'ZKC Airdrop Claim' to lure users. As of the latest verification, www.claim-boundlles.app has been taken offline, but its prior activity poses a continued risk to anyone who interacted with it.

Technical analysis shows that www.claim-boundlles.app was flagged by 3 of 95 security vendors on VirusTotal, including Fortinet, Gridinsoft, and SOCRadar. The domain was registered through BNL-77 (ASN: 399629) and resolved to the IP address 216.245.184.94, hosted in the US under AS399629 BL Networks. It appeared on one security blocklist, PhishDestroy, and did not have an SSL certificate. The nameservers were rudy.ns.cloudflare.com and suzanne.ns.cloudflare.com, while the creation date and SSL issuer details were not available.

Victims who connected a wallet to www.claim-boundlles.app should immediately revoke all token approvals using a tool like Revoke.cash or Etherscan's token approval checker. Funds should be moved to a new wallet to prevent further unauthorized transactions. Users are advised to report the domain to their wallet provider, blockchain explorer abuse teams, and platforms like ScamAdviser or PhishTank to help prevent further incidents.