Kintaras.app copies the Kintara game to run a fake $KINS rewards pool that asks for wallet connections
MalwareTips warns that kintaras.app imitates the Kintara game with a fake $KINS 'reward pool' that pushes visitors to connect crypto wallets; the real game is at kintara.com.
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips reported on 17 October 2026 that kintaras.app imitates the Kintara gaming project with a fake rewards page. According to the report, it pitches a "KINS Reward Pool", tells visitors that every $KINS they hold counts toward their share, and shows a wallet selector so visitors can connect a wallet to "claim rewards". MalwareTips calls the site a wallet-theft lure and stresses that the warning concerns the impostor page, not a finding that the genuine game's operators created it. The genuine kintara.gg address redirects to kintara.com, which presents the real game; Kintara is impersonated and not involved.
How the scam works
In an online game, quests, points and community events are normal, so a reward announcement can feel like part of play rather than a financial request. Followers may assume they missed an announcement, while newcomers may treat the page as the easiest place to learn how rewards work. The extra letter in kintaras.app is easy to miss.
The pool turns existing holdings into a promised entitlement, but naming a token doesn't show a distribution exists, and a displayed reward estimate is not a payment. The "claim" button opens a standard wallet-connection toolkit with familiar wallet names, which makes the page look well integrated; those wallet brands are not endorsing the reward. MalwareTips explains that simply connecting usually reveals only a public address, but the requests that follow can be different: a signature, a transaction that moves value immediately, or a token allowance that lets a contract spend assets later. A malicious page may label any of these "verification" or "activation". Revealing a recovery phrase compromises the wallet regardless of the site.
When a claim then "fails", victims may be pushed to troubleshoot with another approval or a "support" contact. MalwareTips advises rejecting any request from this flow and protecting any secret already disclosed. Its lead image is an illustration with a fictional address, not a capture of the site.
Source
MalwareTips, "Fake Kintara Rewards Scam: Kintaras.app Copy Puts Crypto Wallets At Risk" (published 17 October 2026).
Red flags
- A rewards or airdrop page on a domain one letter off from the real project (kintaras.app vs kintara.com).
- A 'reward pool' that says your token holdings qualify you, with no announcement on official channels.
- A 'Claim Rewards' button that opens a wallet-connection window.
- Wallet requests described as 'verification' or 'activation', or any request for a recovery phrase.
If you were targeted
- 1Don't connect your wallet, sign, or approve anything on the page.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.