claim[.]edgexportal[.]click

Analysis of claim.edgexportal.click shows infrastructure consistent with a high‑risk crypto‑drainer operation. The domain is registered through Dynadot, LLC and was created on May 27 2026. It resolves to 188.114.97.3, an address owned by Cloudflare, Inc. in Canada, and uses Cloudflare’s authoritative nameservers george.ns.cloudflare.com and raina.ns.cloudflare.com. The site serves over HTTPS with a Let’s Encrypt certificate (E8) and returns an HTTP 301 redirect, indicating intentional redirection to a target page. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single security blocklist (PhishDestroy). VirusTotal scans report three detections out of ninety‑one vendors, reinforcing the malicious assessment. The page title returned by the server references “Cryptocurrency prices, Token rates and Altcoin charts ranked by Market Capitalization and Volume | CryptoRank.io,” suggesting a lure aimed at cryptocurrency investors. While the exact landing content has not been examined, the combination of a low trust score, blocklist presence, multiple vendor detections, and the declared scam type of “Crypto Drainer” provides concrete evidence of malicious intent. Defenders should block the domain at perimeter and DNS layers, monitor for connections to the 188.114.97.3 IP, and include the domain in threat‑intel feeds. Ongoing observation is advised to detect any changes in hosting or content, but current indicators justify immediate preventative action.