claim-kintaragg[.]com

Analysis indicates that claim‑kintaragg.com is an active crypto drainer infrastructure. The domain was registered on 17 June 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is hosted behind Cloudflare (AS13335) with the IP address 188.114.96.3 located in the United States. The site returns an HTTP 301 response and presents a Google Trust Services / WE1 SSL certificate, confirming TLS termination at Cloudflare. Technical fingerprints show Cloudflare services and HTTP/3 support. Reputation data shows the domain appears on two security blocklists and is currently blocked by PhishDestroy and ScamSniffer. AlienVault OTX lists the domain in fifteen separate threat‑intel pulses, and Gridinsoft assigns a trust score of 0 / 100. VirusTotal records six positive detections out of ninety‑one scanners. The domain’s nameservers are keaton.ns.cloudflare.com and oaklyn.ns.cloudflare.com. No additional content has been observed beyond the page title, which mirrors the domain name. While the available data strongly suggests malicious intent aligned with crypto‑draining activity, the exact payload or victim interaction flow has not been publicly disclosed. Defenders should block or sinkhole the domain, monitor DNS queries for the associated IP and nameservers, and consider adding the indicator to existing threat‑intel feeds. Continuous re‑evaluation is advised in case the infrastructure evolves or additional malicious artifacts are observed.