claim-yooldo[.]com

Analysis indicates that claim-yooldo.com was registered on 21 February 2026 and is presently taken offline. DNS resolution points to 188.114.96.3, an address owned by Cloudflare, Inc. (AS13335) and geolocated in the United States. The hosting choice is consistent with many short‑lived malicious infrastructures that leverage reputable CDNs to obscure true backend servers. The site is classified as a crypto‑drainer scam; no additional payload or page metadata is available because the service is offline, and the page title has not been captured.

VirusTotal reports that two out of ninety‑three scanning engines flagged the domain, confirming the presence of at least one malicious indicator. The SSL certificate is identified as “WE1”, suggesting a self‑signed or low‑trust certificate that does not provide meaningful authentication. Independent threat‑intelligence feeds have added the domain to five blocklists, and it is actively listed by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. These listings reinforce the assessment that the domain is being used to lure victims into transferring cryptocurrency to attacker‑controlled wallets.

Uncertainty remains regarding the exact phishing landing page, the specific wallet addresses advertised, and whether any additional command‑and‑control infrastructure is coupled to the same IP. Defenders should continue to block the domain at the DNS and proxy layers, monitor for any resurrection of the host, and consider adding the IP address to network‑wide deny lists. Ongoing correlation with threat‑intel sources is advised to capture any re‑use of the Cloudflare front‑end for future campaigns.