claim[.]perpsdao[.]xyz

The domain claim.perpsdao.xyz was registered on February 21, 2026 through Tucows Domains Inc. It resolves to the IPv4 address 66.33.22.218, which is advertised as being located in the United States under AS400940 (Railway). Authoritative name servers are nicole.ns.cloudflare.com and rodney.ns.cloudflare.com. HTTPS connections are terminated by a Google Trust Services certificate issued to the WE1 organization, indicating the use of a legitimate certificate authority. An HTTP request to the root URL returns a 301 redirect, and the page title reported by scanners is “PerpsDAO Claim Portal”. The domain is listed on one security blocklist and has been explicitly blocked by the PhishDestroy feed. Threat intelligence classifies the site as a crypto drainer with a high risk rating. VirusTotal analysis shows that 3 of 95 scanned security vendors flagged the domain as malicious, and Gridinsoft assigns a trust score of 0 out of 100. The presence of a valid SSL certificate does not mitigate the malicious intent, and the limited detection count suggests that many scanners have yet to flag the infrastructure. Defenders should add claim.perpsdao.xyz to DNS blocklists and firewall deny lists, monitor outbound connections to 66.33.22.218, and consider sinkholing the domain to disrupt the drainer workflow. Continuous re‑evaluation is advised, as additional indicators may emerge from deeper content inspection or from increased vendor detection.