claim[.]lineabag[.]org

PhishDestroy has identified claim.lineabag.org as a suspicious domain engaged in brand impersonation, specifically targeting Linea. The site is currently offline, but its purpose appears to be a crypto drainer or phishing page designed to steal credentials or digital assets from Linea users. The threat level is under investigation, and users should exercise extreme caution if they encounter this domain.

The domain was registered on October 1, 2025, through NameSilo, LLC, and resolves to IP address 188.114.96.3. It appears on one security blocklist and has no SSL certificate, indicating a lack of basic security measures. VirusTotal reports 0 detections out of 95 vendors, meaning it has not yet been flagged by antivirus engines. However, this low detection rate does not imply safety; rather, it suggests the domain is relatively new and may have evaded initial screening. The page title "Nur einen Moment…" is generic and could be used to mask malicious activity.

As the domain is currently offline, the immediate risk is mitigated, but it could be reactivated or redirected to other malicious sites. Users should avoid visiting claim.lineabag.org or interacting with any content from it. If you have already accessed the site, monitor your accounts for unauthorized activity and consider using a wallet scanner for crypto drains. Always verify the legitimacy of Linea-related sites through official channels before connecting your wallet or entering sensitive information. PhishDestroy recommends staying updated on this domain's status and reporting any sightings to security platforms.