claim-btcfi[.]com

The domain claim-btcfi.com was a crypto drainer phishing site designed to steal cryptocurrency by tricking users into connecting their wallets. Unlike typical brand impersonation schemes, this site did not mimic a known brand or use an identifiable drainer kit. As of the latest verification, claim-btcfi.com has been taken offline, though its prior activity poses a continued risk to users who may have interacted with it.

Technical analysis shows that claim-btcfi.com was flagged by 1 of 95 VirusTotal security vendors, while Google Safe Browsing did not detect it. The domain appeared on 5 security blocklists, including PhishDestroy, ScamSniffer, and Polkadot. It was created on February 21, 2026, and resolved to the IPv6 address 2606:4700:3035::ac43:c340, hosted on Cloudflare's infrastructure in the US (AS13335). The SSL certificate was issued by WE1, and no page title was observed during active monitoring. The registrar information remains unavailable.

Users who connected a wallet to claim-btcfi.com should immediately revoke all token approvals using a tool like Revoke.cash or Etherscan's token approval checker. Funds should be moved to a new, secure wallet to prevent unauthorized transfers. Victims are advised to report the domain to their wallet provider and relevant fraud-tracking platforms, such as ScamSniffer or PhishDestroy, to assist in broader threat mitigation efforts.