claim-mito[.]xyz

The domain claim-mito.xyz was registered on September 05, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is presently taken offline. Infrastructure analysis shows that the domain resolved to the IP address 172.67.129.160, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are louis.ns.cloudflare.com and veronica.ns.cloudflare.com, indicating that the site leveraged Cloudflare's DNS and CDN services. No SSL certificate was presented for the domain, suggesting that any traffic would have been served over plain HTTP or that the TLS handshake was aborted before certificate exchange.

The only visible page title retrieved was "Just a moment...", a generic placeholder often associated with Cloudflare's temporary interstitial challenge page, and no further page content has been observed. Threat intelligence flags claim-mito.xyz as a crypto scam, specifically a crypto drainer, and the site was blocked by the PhishDestroy platform. VirusTotal analysis recorded detections by 2 of 95 security vendors, which reinforces the suspicion of malicious activity. Additionally, the domain appears on a single external blocklist, confirming that at least one independent security feed has catalogued it as hostile.

Given the combination of a recent registration, use of Cloudflare infrastructure without a valid TLS certificate, low but non‑zero vendor detections, and confirmed blocklist placement, defenders should treat claim-mito.xyz as a confirmed malicious actor. Recommended mitigations include adding the domain to network‑level deny lists, updating endpoint protection signatures to incorporate the observed detections, and monitoring for any new domains registered by the same registrar that employ similar naming patterns or Cloudflare nameservers. Continuous observation of related IP ranges and DNS records is advised, as threat actors may repurpose the same Cloudflare edge nodes for future campaigns.