idos[.]claims

The domain idos.claims is currently active and classified as a high‑risk crypto drainer. Infrastructure analysis shows it resolves to IP 104.21.18.143, hosted in the United States under AS13335 (Cloudflare, Inc.). Both authoritative nameservers, sean.ns.cloudflare.com and luciana.ns.cloudflare.com, are Cloudflare‑managed, and the site presents a Let’s Encrypt certificate (E8). The site returns HTTP 521, indicating a Cloudflare‑origin error, while Cloudflare Browser Insights and HTTP/3 are detected. Registration data indicates the domain was created on March 07 2026 through NiceNIC International Group Co., Limited. Threat intelligence reports that the domain is listed on three security blocklists and has been blocked by multiple anti‑phishing services. VirusTotal scans show four of ninety‑four security vendors flag the domain. The page title observed is “Success!”. While the exact phishing landing page content has not been examined, the combined evidence points to a malicious operation targeting cryptocurrency transactions. Defenders should immediately block DNS resolution for idos.claims, deny outbound traffic to its resolving IP, and add the domain to existing URL filtering policies. Continuous monitoring of related Cloudflare‑hosted IP ranges and periodic re‑scanning are recommended to detect any changes in the site’s status.