claim-privix[.]xyz

This domain, claim-privix.xyz, is flagged as an active crypto drainer with a high-risk classification. Registered on March 11, 2026, through NameCheap, Inc., it resolves to IP 75.2.60.5, hosted on AS16509 (Amazon.com, Inc.) in the United States. The domain is currently active, returning an HTTP 200 status, and is blocked by at least one security vendor (PhishDestroy). Analysis of infrastructure reveals the use of Netlify for hosting and HSTS implementation, alongside a Let's Encrypt SSL certificate (E8). The page title, 'Privix - Privacy By Default. Speed Without Compromise,' suggests a focus on cryptocurrency or privacy-related services, aligning with the crypto drainer classification provided in threat intelligence. Two of 94 security vendors on VirusTotal have flagged this domain, though the specific detection context remains unverified. The domain appears on one security blocklist, and its Gridinsoft trust score is 0/100, reinforcing its malicious classification. Nameservers are provided by registrar-servers.com, a common configuration for domains registered via NameCheap. No evidence of a phishing kit or specific brand impersonation is present in the available data, though the crypto drainer designation indicates its likely use in wallet-draining attacks. Defenders should treat this domain as hostile. Immediate actions include blocking the domain and its resolving IP at the network level, monitoring for connections to 75.2.60.5, and reviewing logs for interactions with the domain since its registration. Given its active status and high-risk classification, assume any user interaction with this domain may result in financial loss. Further analysis of associated wallet addresses or transaction patterns is recommended to identify broader campaign infrastructure.