claim[.]defituna[.]info

The domain claim.defituna.info is a phishing site specifically designed as a crypto drainer, a type of scam that targets cryptocurrency wallets to siphon funds without the owner's consent. This site does not impersonate a known brand and no specific drainer kit has been identified. As of the latest verification, claim.defituna.info has been taken offline.

Technical indicators confirm the malicious nature of claim.defituna.info. The domain was flagged by 1 of 95 VirusTotal security vendors, specifically Gridinsoft, and appears on 1 security blocklist, PhishDestroy. It was registered through NameSilo, LLC on February 21, 2026, and resolves to the IP address 23.160.56.192, located in the US under AS26042 (FiberState, LLC). The domain uses Cloudflare nameservers (zariyah.ns.cloudflare.com and gerardo.ns.cloudflare.com) and lacks an SSL certificate. The observed page title was '$TUNA Airdrop', aligning with its cryptocurrency scam classification.

Individuals who interacted with claim.defituna.info should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. Monitor wallet activity for unauthorized transactions and report the incident to relevant platforms, such as the wallet provider or blockchain explorer. Additionally, victims may report the domain to their local cybercrime unit or organizations like the Anti-Phishing Working Group (APWG) to aid in mitigation efforts.