claim-farmtown[.]online

This domain, claim-farmtown.online, is identified as an active crypto drainer, a threat type designed to siphon cryptocurrency assets from victim wallets through deceptive transaction prompts or malicious smart contract interactions. The domain remains operational as of the latest verification, posing an immediate risk to users encountering it via phishing links or compromised platforms. Analysis indicates the domain was registered on June 18, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 188.114.96.3 and utilizes an SSL certificate issued by Google Trust Services, a common tactic to appear legitimate. VirusTotal detection metrics show the domain is flagged by 2 of 95 security vendors, a low but notable signal given the targeted nature of crypto drainers. Infrastructure review reveals no additional blocklist entries or trust score anomalies, though the domain’s recent creation and niche threat focus limit broader detection. The domain remains active and poses a high risk to cryptocurrency holders. Recommended actions include blocking the domain and associated IP at the network level, alerting users to the specific threat of crypto drainers, and monitoring for wallet interactions with claim-farmtown.online. Security teams should prioritize this domain in threat feeds due to its active status and direct financial impact potential. No brand impersonation was identified, but the domain’s naming convention may mimic legitimate farm or gaming-related crypto projects.