claim-debtcoin[.]com

Analysis indicates that claim-debtcoin.com was registered on August 30, 2025 through OwnRegistrar, Inc. The domain resolves to Cloudflare address 104.21.44.31, located in the United States under ASN 13335. Nameservers listed are lily.ns.cloudflare.com and mitch.ns.cloudflare.com, with a null entry observed. No TLS certificate is presented, meaning HTTPS connections would be unencrypted or result in a certificate error. The site’s sole visible page title is "DebtCoin ($DEBT) - The Memecoin That Pays Off America's National Debt", suggesting a crypto‑related financial lure.

The page explicitly impersonates Solana, fitting the brand‑impersonation category. Reputation scoring from Gridinsoft assigns a 0 / 100 trust rating, and the domain appears on two independent blocklists, PhishDestroy and ScamSniffer, confirming external detection. VirusTotal scanning reported a single positive detection out of 95 scanners, reinforcing malicious classification. The domain is currently offline, which limits real‑time verification of content, but historical evidence remains sufficient for defensive action.

Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms, as no sample pages or download links have been captured. Defenders should block DNS resolution for claim-debtcoin.com, add the IP 104.21.44.31 to network‑level deny lists, and ensure that web‑filtering solutions reference the identified blocklists. Continuous monitoring of Cloudflare‑hosted IP ranges for similar impersonation campaigns is advised, as the infrastructure can be reused with minimal changes. Incident response teams should also watch for emails or social‑media posts that reference DebtCoin or the "pays off America’s national debt" narrative, as these are likely vectors for the lure.